Stop Windows 10 Updates Properly and Completely

Original author of the script here (with many contributions).There is some confusion about when the script does what, and that's my fault. I need to make a video or at least provide detailed documentation with pictures. Until then, hopefully I can shed some light on a few things here.
Okay, here goes:

Before I start, the only file most people need to run in the folder is "Windows Update MiniTool.cmd" which is the script itself. The Uninstaller and Configurator may never be needed depending on how you use it.

When you use the script, it:
1) Reversibly* disables evil things that forces updates (remsh.exe, USOClient.exe, WaaSMedic.exe, and SIHCLient.exe. Scheduled tasks cannot run them. They can reestablish themselves after an update and reboot, so just run the script and close the first window. No need to check for updates again. Windows Updates do not need these mentioned files. Forced updates do.
2) after disabling "evil things" it opens the script window with updates still turned off with Windows Update Blocker (WUB). If you close the window updates stay off with WUB.
3) If you choose to check updates, WUB is turned off which enables Windows Updates, and Windows Update MiniTool (WUMT) is started. Don't change any settings in the lower left of WUMT while using the script.
4) AFTER you check for updates and BEFORE you close WUMT you can use the store or update Windows Defender or add .net 3.5, everything you normally do while the windows update service is turned on. Just make sure you leave WUMT running while you're doing all this, like this, or you'll have to start over:

5) About the Configurator. If you choose to leave updates on at all times, it will work better at preventing unwanted updates than not using the script at all, but you'll still get windows updates, just not forced major version upgrades (hopefully). I don't use it myself, I only offer it in the hopes that it may help someone. It gives a choice of convenience vs. control.

*Included uninstaller script undoes all changes made by the script.

I'd be glad to answer any questions you might have.

Superfly said:

Well I don't get it.. stopping WU thru' firewall does the job...or am I the only one?

Mine is just a more aggressive approach to the problem.

Callender said:

The only question I have is when manually installing an update via DISM or installing via downloaded .cab or .msu files it would appear that the configurator needs to be run to enable the updates to install particularly if a reboot is required to complete. Is that correct?wusa.exe "FullPathTo.msu"dism /online /add-package /packagepath:"FullPathTo.cab"Or at least every time I tried to manually install a cumulative update installation failed until WU service was set to default startup type. That might be specific to my machine though.

You can either install updates that you mentioned during Step 4, or using the Configurator.

Callender said:

It's very handy for manual control of windows updates in Windows 10 Home. That's what I use it for.

This Home Edition user has never used it, and no updates have been downloaded automatically.

Matthew Wai said:

This Home Edition user has never used it, and no updates have been downloaded automatically.

What method are you using?

Originally Posted by Matthew Wai
This Home Edition user has never used it, and no updates have been downloaded automatically.
pf100 What method are you using?

I, too, use Windows 10 Home x64; and disabling Windows Update service suffices in preventing updates.

On occasion(s), I might have absentmindedly** forgotten to re-disable after securing a Cumulative Update, and I got an Update delivered, last month. After its installation, I disabled the service and did not receive March's Cumulative Update.

I did download March's early kb offer posted by Brink and held out on installing until this weekend that just passed. When I tried to install, it failed. Went online and found the kb was no longer on the docket, and a newly released kb was processed.

** Prior to February's Update delivery, my system would occasionally freeze completely, leading to a reboot. I'm not so OCD that I would make sure Windows Update remained disabled after such a reboot from a freeze. So there's a possiblility that a freeze and reboot triggered the reset of Windows Update to Automatic, instead of me absorbing the blame with my absentmindedness. I have increased slightly the frequency of surveying the status of Windows Update service by incorporating the chore into a daily routine.

pyramid10 said:

Matthew Wai said:

This Home Edition user has never used it, and no updates have been downloaded automatically.

pyramid10 said:

I, too, use Windows 10 Home x64; and disabling Windows Update service suffices in preventing updates.On occasion(s), I might have absentmindedly** forgotten to re-disable after securing a Cumulative Update, and I got an Update delivered, last month. After its installation, I disabled the service and did not receive March's Cumulative Update.I did download March's early kb offer posted by Brink and held out on installing until this weekend that just passed. When I tried to install, it failed. Went online and found the kb was no longer on the docket, and a newly released kb was processed.** Prior to February's Update delivery, my system would occasionally freeze completely, leading to a reboot. I'm not so OCD that I would make sure Windows Update remained disabled after such a reboot from a freeze. So there's a possiblility that a freeze and reboot triggered the reset of Windows Update to Automatic, instead of me absorbing the blame with my absentmindedness. I have increased slightly the frequency of surveying the status of Windows Update service by incorporating the chore into a daily routine.

I'm glad your method is working for you. I'm not saying my way is the best or that you should even use it. I started the script as a project to use for myself and if it helps someone then all the better.

USOClient, WaaSMedic, SIHClient, and remsh have many tasks that force windows updates on. USOClient (and probably the others) downloads windows updates even if the Windows Update Service is off. So I'm amazed that you aren't getting forced updates.