[hn773746483]

Completely disabling Windows Update is very difficult, much more involved than simply disabling a service or two or a registry key.

There's multiple services dedicated to monitoring / "repairing" windows update, scheduled tasks to enable those, and further tasks to repair everything completely if anything is modified.

And if all of that is disabled... there's a single exe which "helpfully" re-enables and re-creates all of the necessary scheduled tasks and services, which gets called by the service manager automatically: "upfc.exe"

Renaming / getting rid of this stops WaasMedic & other services from respawning.

[Krssst]

> There's multiple services dedicated to monitoring / "repairing" windows update, scheduled tasks to enable those, and further tasks to repair everything completely if anything is modified.

Sounds like we'd need some resident anti-virus-like software dedicated to enforcing the user's choices on the OS.

(but definitely do your updates so as to not become part of a botnet. Too bad the security updates must come with unneeded feature updates)