Enable or Disable Windows Update Automatic Updates in Windows 10  

TairikuOkami said:

Since 1703, security updates will be downloaded regardless

It seemed not to be the case on my 1703.
'Update Rollups', 'Security Updates', and 'Critical Updates' were not downloaded as shown below:
I seem to have no option for Automatic downloading of updates Solved - Page 6 - Windows 10 Forums

The same happened on my 1709, but I did not bother to take a screenshot.

TairikuOkami said:

Since 1703, security updates will be downloaded regardless, if you are 3 versions behind, even upgrades count.

So, basically, there's no effective way to completely disable Automatic Updates in Home edition at this point?

Have you read my post #460 above? I have been using Home Edition for years.

Matthew Wai said:

Have you read my post #460 above? I have been using Home Edition for years.

I believe you that it hasn't thus far, but given that Windows is explicitly stating that it can, (i.e. "Windows will automatically download only those updates required to keep Windows running smoothly") I suspect that the lack of updates getting downloaded/installed on your system thus far is not conclusive evidence that Windows is never going to download and install something on your system. I'm just looking for a more absolute solution that doesn't get caught up in Windows' own conditional logic, if that makes sense. :)

TairikuOkami said:

You can disable auto-checking for updates and by that prevent them being downloaded.
Then you can check for them when you find convenient or download them manually.

I have tested this method and it works, thus far:

Code:

takeown /f "%WINDIR%\System32\UsoClient.exe" /a
icacls "%WINDIR%\System32\UsoClient.exe" /remove "Administrators" "Authenticated Users" "Users" "System"

So, this just makes it so that Windows can't run UsoClient.exe, which is what UpdateOrchestrator uses to trigger a scheduled Windows Update scan? I did notice that I can't just disable UpdateOrchestrator's "Schedule Scan" scheduled task using my normal user account privileges, so I guess that would be the work around. Are you saying that doing that works, even without touching either the Windows Update service or the WindowsUpdate scheduled tasks?

It just checked for updates automatically an hour ago.

TairikuOkami said:

Code:

takeown /f "%WINDIR%\System32\UsoClient.exe" /aicacls "%WINDIR%\System32\UsoClient.exe" /remove "Administrators" "Authenticated Users" "Users" "System"

I just ran it in a CMD file a few minutes ago. Let's see whether it will work at my end.

TairikuOkami said:

Then you can check for them when you find convenient or download them manually.

I don't have to run a check manually because my VBScript does so automatically.

TairikuOkami said:

Code:

takeown /f "%WINDIR%\System32\UsoClient.exe" /aicacls "%WINDIR%\System32\UsoClient.exe" /remove "Administrators" "Authenticated Users" "Users" "System"

I just ran the above on PowerShell (Admin) and got the following error: