SHARE
TWEET

Windows Update Disable

TairikuOkami Nov 25th, 2017 (edited) 1,527 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. rem https://www.ghacks.net/2017/12/03/allow-only-manual-updates-on-windows-10
  2. rem https://www.novirusthanks.org/products/win-update-stop
  3. rem https://www.sordum.org/9470/windows-update-blocker-v1-5/
  4.  
  5. rem Windows Update Manager - https://github.com/DavidXanatos/wumgr/releases
  6. rem DISM /Online /Add-Package /PackagePath:%USERPROFILE%\Desktop\Windows10.0-KB4464455.cab
  7.  
  8. rem Disable auto-checking for updates, non-english users have to remove selected users manually (manual checking works, whenever YOU want, not Windows 10)
  9. takeown /s %computername% /u %username% /f "%WINDIR%\System32\UsoClient.exe"
  10. icacls "%WINDIR%\System32\UsoClient.exe" /inheritance:r /grant:r %username%:F
  11. icacls "%WINDIR%\System32\UsoClient.exe" /remove "Administrators" "Authenticated Users" "Users" "System"
  12. rem https://i.postimg.cc/q7cS25g6/capture-03312019-102210.jpg
  13.  
  14. rem To Restore (when there is update/upgrade updating exe, otherwise it will fail)
  15. rem icacls "%WINDIR%\System32\UsoClient.exe" /reset
  16.  
  17. rem Disable checking for updates via GUI, non-english users have to remove selected users manually
  18. rem takeown /s %computername% /u %username% /f "%WINDIR%\System32\usocoreworker.exe"
  19. rem icacls "%WINDIR%\System32\usocoreworker.exe" /inheritance:r /grant:r %username%:F
  20. rem icacls "%WINDIR%\System32\usocoreworker.exe" /remove "Administrators" "Authenticated Users" "Users" "System"
  21.  
  22. rem To Restore (when there is update/upgrade updating exe, otherwise it will fail)
  23. rem icacls "%WINDIR%\System32\UsoClient.exe" /reset
  24. rem icacls "%WINDIR%\System32\usocoreworker.exe" /reset
  25.  
  26. rem Option 2 - remove SoftwareDistribution and create a nonexistent symlink, checking for updates will always fail
  27. rem taskkill /im TiWorker.exe /f
  28. rem net stop wuauserv /y
  29. rem rd "%WINDIR%\SoftwareDistribution" /s /q
  30. rem mklink /d "%WINDIR%\SoftwareDistribution" "X:\SoftwareDistribution"
  31.  
  32. rem Option 3 - block svchost.exe in the firewall (outbound) - but it also blocks updating of certificates (daily)
  33. rem But you have to setup DNS servers first, disable DNS Client service, restart
  34. rem wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("1.1.1.1")
  35. rem reg add "HKLM\System\CurrentControlSet\Services\Dnscache" /v "Start" /t REG_DWORD /d "4" /f
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top