@echo off
title Disable Windows 10 Auto Updates
echo ====================================================
echo     DISABLING WINDOWS AUTO UPDATE (Windows 10)
echo ====================================================

:: Check for Administrator permissions
net session >nul 2>&1
if %errorlevel% NEQ 0 (
  echo You MUST run this script as ADMINISTRATOR!
  pause
  exit /b
)

echo.
echo ==== STOPPING WINDOWS UPDATE SERVICE ====
sc stop wuauserv >nul 2>&1
sc stop bits >nul 2>&1
sc stop dosvc >nul 2>&1

echo.
echo ==== DISABLING WINDOWS UPDATE SERVICE ====
sc config wuauserv start= disabled
sc config bits start= disabled
sc config dosvc start= disabled

echo.
echo ==== DISABLING UPDATE ORCHESTRATOR TASKS ====
schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /Disable >nul 2>&1
schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\UpdateModel" /Disable >nul 2>&1
schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /Disable >nul 2>&1
schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Scheduled Start" /Disable >nul 2>&1
schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable >nul 2>&1

echo.
echo ==== BLOCKING WINDOWS UPDATE VIA REGISTRY ====
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v DoNotConnectToWindowsUpdateInternetLocations /t REG_DWORD /d 1 /f >nul 2>&1
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v AUOptions /t REG_DWORD /d 1 /f >nul 2>&1

echo.
echo ==== REMOVING UPDATE PERMISSIONS ON SERVICE (OPTIONAL) ====
takeown /F "C:\Windows\System32\svchost.exe" >nul 2>&1

echo.
echo ====================================================
echo   WINDOWS AUTO UPDATE HAS BEEN DISABLED SUCCESSFULLY!
echo ====================================================
pause