New
#81
SetACL Studio
- Windows Update permissions: remove the Start and Stop rights of Authenticated users.
- check Windows Modules Installer permissions too.
Services snap-in:
- set startup of both mentioned services to Disabled, not to Manual.
In other words: set all EXACTLY as on four pictures in my post above.