Perhaps you should have read my post more carefully
Even on the enterprise edition, setting the Group Policy does nothing to stop the automatic downloads of the updates.
To fully stop them the Workstation ( still needs enterprise edition) must be in a network domain attached to the WSUS local server.

If the Windows 10 Enterprise is running on a local account ( not joined Domain) disabling the Windows Update through Group Policy has no effect on these services ( which is retarded I know that, it should set them do fully disabled). Setting the services through the windows registry only works for that local session. As soon as you reboot those services will be set to manual or "Trigger Start" again and that means any other service now can start the Windows update service!!! without your knowledge.



Why do you think they allowed their Corporate clients to use the WSUS servers?
Because they would be looking for a different Desktop Solution within days that's why!!!

No one in IT sets up their workstations to do standalone updates it is all done with their WSUS servers.


Disabling Windows Update ( Automatic updates) in Group Policy does not stop the downloads of the updates themselves!! only stops them from being installed.

READ!!

Windows update
Windows update Medic Service
Background Intelligent Transfer Services


Now try to stop these services from computer management

"Windows update Medic Service"
Stop it can click apply - Error

"Background Intelligent Transfer Services" ( the secret service for piggy back update downloads)
Stop it....WTF error and when you reboot its back to "Triggered Start"

LMAO!!


The Control panel still has access to these services because well Group Policy has no affect on them!!
The only way to stop them is to use a logon script or batch that sets the registry keys to Disabled ( option 4)

People need to understand that Windows 10 is not an OS anymore it's really a client that is now fully controlled by remote and you really need to FULLY UNPLUG now or else you risk of messing up a clean working OS with your applications.

Bottom line either setup a Domain ( with Windows 10 Server) and have your windows 10 clients join it ( so you can set the WSUS update rules) or use the batch or logon scripts.

 

Last edited: Jan 6, 2021

Is this the info you need? Apologies, I'm an idiot lol

 

@EAR TO LEARN, I clearly mentioned, this method work only with Windows Professional Edition.

As can be seen from your image, you have only the (castrated) Home Edition.
That's why you get error message when you try to launch gpedit.msc (Local Group Policy Editor).

 

Last edited: Jan 7, 2021

Fair enough, I did clearly mention I'm an idiot though so there's that...Any suggestions for me? If not don't worry your help is appreciated anyway

 

@audiozuser76
Dude thank you. That is so cool. I might give this a go then at some point. Thank you.

PS I don't care if Windows still downloads the updates, as long as it won't install it.
(I mean, I do care, it's BS, but using Windows 10 by itself is BS so what's one more insult to users amidst the ocean of BS they pull with this crap lol)

 

@danfuerth , would you mind sharing the boot script to disable those services and a for dummies explanation on how to run the script before login?
Thanks a lot in advance

 

You have something that is called Windows Update Blocker that is the only thing that has worked for me. Just remember that you have to use it again to turn updated on. Here is the links to it:
https://www.sordum.org/9470/windows-update-blocker-v1-6/

I don't use it anymore cause I like to have the minor updates on the 1909 version. But as I said you need that program to turn the updates on again or you never would be able to turn it on again.

 

Thanks for the info and reminders. Is there something similar for Android or iOS?

 

Hate your life? Try going through taskschd.msc
and see if there's anything turning the update service back on. It's fun stuff. Ask me how I know.

In the end, I gave up and tried different apps. The two I stuck with are

1. shutdownBlocker by cresstone
2. TinyWall by Károly Pados

See that unticked box over there?

As long as I don't touch it, Windows will. not. update.
You can also lock the settings with a password, but I've found that to be unnecessary.

Childish as it may be, watching the Windows Update Troubleshooter give up just fills me with joy.

____

Here are some more tools you could try.
Since this is my first post, I should clarify that I don't have any affiliation with the programs I mentioned.

Alternatives to wsusoffline mentioned by @Ayahuasca:

• Portable Update, link
  
• Patchfluent, link
• WuMgr, article, link

Since I still miss my patchlogs:

• WinUpdatesView, link

Android alternative to a whitelisting firewall on Windows:

• AFWall+, needs root, link

Completely unrelated honorable mention because this post is already too long:

• Everything, link

 

This is it. @EAR TO LEARN check it out https://www.sordum.org/9470/windows-update-blocker-v1-6/
Although I can now find my way with GPolicy Editor it's just such a convenient tool. I'm not positive it works with Windows 10 Home but definitely and easy to give it a try.
For instance, sometimes I need Windows Update to activate Windows/Office with certain methods.
So I launch this tool. Enable Windows Update. Do my things (activating Office). Disable again with the tool, close and forget.

 

@Xupito Thank you very much for this, I'm going to download it now, cheers for the help

 

A pleasure, @Daskeladden is also to thank.

 

Enable Group Policy Editor In Windows 10 Home Edition

https://www.itechtics.com/enable-gpedit-windows-10-home/

https://www.majorgeeks.com/content/page/enable_group_policy_editor_in_windows_10_home_edition.html

 

How to Disable Windows 10 Automatic Updates with Registry Editor?

You can disable windows 10 automatic updates using Registry editor as well. Like Group Policy Editor, we will outline at least two different ways for you to do that.

Disable Automatic Updates

Follow these steps to permanently disable Windows 10 automatic updates:

1. In the Start menu search bar, type Regedit.
2. From the search result, click on the Registry Editor.
3. From the Registry Editor Window Navigate to the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows
4. Right-click on the Windows folder from the left pane, hover your cursor over new to get its submenu and click on Key.
5. Enter WindowsUpdate as the new key’s name.
6. Choose the Key option from the New submenu after right-clicking the generated key.
7. Enter AU as the new key’s name.
8. Select the DWORD (32-bit) Value option from the New submenu after right-clicking the AU key.
9. Enter the name NoAutoUpdate for the new key.
10. Change the value of the newly generated key from 0 to 1 by double-clicking it.
11. Then press the OK button.
12. Close all windows restart your windows.

The steps mentioned above will permanently disable windows 10 automatic updates. But again, you can download and install the latest updates from the Windows update page.

source : https://yehiweb.com/how-to-disable-windows-10-automatic-updates/

 

Just go to start run typ services.msc go to the windows update service and disable it

 

Thanks for this informative thread. Any tips on disabling Windows Defender completely? I'm on W10 Professional 1909 if it helps.

 

grazie, thanks a lot, merci beaucoup... grazie un casino frate! <3

 

Turn off Windows Defender in Windows 10 permanently

How to turn off Windows Defender in Windows 10 permanently? Sometimes you want to disable Windows Defender for testing purposes. If you have an Antivirus application running, Windows Defender will be automatically disabled. That’s because your Antivirus software will take over the security from now on. This article will teach you how to turn off Windows Defender in Windows 10 temporarily and permanently.

Table of contents

• Windows Defender unable to stop service
• Check status Windows Defender in Windows Security
• Disable Windows Defender in Windows 10 temporarily
• How to turn off Windows Defender in Windows 10 permanently
  • Step 1. Boot into safe mode
  • Step 2. Turn off Real-time protection
  • Step 3. Autoruns for Windows
  • Step 4. Enable Windows Services in Autoruns
  • Step 5. Uncheck Windows Defender Antivirus Service
  • Step 6. Boot into normal startup
• Verify that Windows Defender is kept turned off after Windows 10 restart
• Revert the changes
• Conclusion

Link: www.alitajran.com/turn-off-windows-defender-in-windows-10-permanently/

 

Thank you to make me discover this app, well made and useful!

But, there is a but:

Important note: This open source proggie is not updated by the original developer to reflect the current versions of windows anymore.

But fortunately, the development is now handed by a community on Gitlab, so if you wanna have the last up-to-date versions you have to go there:

https://gitlab.com/wsusoffline/wsusoffline/-/releases​