feat: disable Windows Update permanently (services + registry policy)

Stops and disables wuauserv, UsoSvc, and BITS services.
Sets NoAutoUpdate and AUOptions registry policies to prevent
automatic and manual update checks.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Administrator 2026-03-16 09:36:41 +01:00
parent c54df9162d
commit b8833f2897

View File

@ -452,6 +452,28 @@ Set-ItemProperty -Path $desktopRegPath -Name "IconSize" -Value 32 -Type DWord -F
Set-ItemProperty -Path $desktopRegPath -Name "Mode" -Value 1 -Type DWord -Force Set-ItemProperty -Path $desktopRegPath -Name "Mode" -Value 1 -Type DWord -Force
Set-ItemProperty -Path $desktopRegPath -Name "LogicalViewMode" -Value 3 -Type DWord -Force Set-ItemProperty -Path $desktopRegPath -Name "LogicalViewMode" -Value 3 -Type DWord -Force
# Windows Update dauerhaft deaktivieren
Write-Host " Windows Update deaktivieren..." -ForegroundColor Gray
# Update-Service stoppen und auf "Deaktiviert" setzen
Stop-Service -Name "wuauserv" -Force -ErrorAction SilentlyContinue
Set-Service -Name "wuauserv" -StartupType Disabled -ErrorAction SilentlyContinue
# Orchestrator-Service (plant Updates im Hintergrund)
Stop-Service -Name "UsoSvc" -Force -ErrorAction SilentlyContinue
Set-Service -Name "UsoSvc" -StartupType Disabled -ErrorAction SilentlyContinue
# BITS (Background Intelligent Transfer Service - laedt Updates runter)
Stop-Service -Name "BITS" -Force -ErrorAction SilentlyContinue
Set-Service -Name "BITS" -StartupType Disabled -ErrorAction SilentlyContinue
# Registry: Automatische Updates komplett deaktivieren
$wuRegPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU"
if (-not (Test-Path $wuRegPath)) {
New-Item -Path $wuRegPath -Force | Out-Null
}
# NoAutoUpdate = 1 → Keine automatischen Updates
Set-ItemProperty -Path $wuRegPath -Name "NoAutoUpdate" -Value 1 -Type DWord -Force
# AUOptions = 1 → Nie nach Updates suchen
Set-ItemProperty -Path $wuRegPath -Name "AUOptions" -Value 1 -Type DWord -Force
Write-Host " Windows Update deaktiviert!" -ForegroundColor Green
# Explorer neu starten damit alle Einstellungen sofort wirksam werden # Explorer neu starten damit alle Einstellungen sofort wirksam werden
Write-Host " Explorer wird neu gestartet..." -ForegroundColor Gray Write-Host " Explorer wird neu gestartet..." -ForegroundColor Gray
Stop-Process -Name "explorer" -Force -ErrorAction SilentlyContinue Stop-Process -Name "explorer" -Force -ErrorAction SilentlyContinue