Disable "PerformRemediation" task
This script disables the "PerformRemediation" scheduled task in Windows. This task performs recovery actions for update-related services to ensure they run in a supported configuration. Disabling this task enhances privacy by reducing automatic system changes and limiting data collection related to updates. It enhances control over system settings, letting users manage update configuration tasks without being overridden by the system. It improves performance by preventing unnecessary background ...
Disable "Report policies" task
This script disables the "Report policies" scheduled task. This task might be responsible for reporting policy-related information to Windows Update or other system management tools. According to the Task Scheduler, this task executes "%SYSTEMROOT%\\System32\\UsoClient.exe ReportPolicies". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Report policies": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🟢 Ready | | Windows 11 22H2 ...
Disable "RestoreDevice" task
This script disables the "RestoreDevice" scheduled task. This task is involved in restoring device settings or drivers as part of update processes. Overview of default task statuses - "\\Microsoft\\Windows\\InstallService\\RestoreDevice": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🟡 N/A (missing) | | Windows 11 22H2 | 🟡 N/A (missing) | | Windows 11 23H2 | 🟢 Ready |
Disable "ScanForUpdates" task
This script disables the "ScanForUpdates" scheduled task. This task is responsible for performing update scans. Microsoft officially documents this task as part of the Windows updates process. Microsoft suggests disabling this task as a measure to reduce data collection and improve performance. This recommendation is also supported by Citrix for optimization purposes. Overview of default task statuses - "\\Microsoft\\Windows\\InstallService\\ScanForUpdates": | OS Version | Default status | | -...
Disable "ScanForUpdatesAsUser" task
This script disables the "ScanForUpdatesAsUser" scheduled task. This task is responsible for performing update scans under user-specific contexts. Microsoft officially documents this task as part of the Windows updates process. Microsoft suggests disabling this task as a measure to reduce data collection and improve performance. This recommendation is also supported by Citrix for optimization purposes. Overview of default task statuses - "\\Microsoft\\Windows\\InstallService\\ScanForUpdatesAsUser": ...
Disable "Schedule Maintenance Work" task
This script disables the "Schedule Maintenance Work" scheduled task. This task is responsible for performing maintenance activities related to Windows Update, such as cleanup operations or preparation steps for update installations. According to the Task Scheduler, this task executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartMaintenanceWork". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Maintenance Work": | OS Version | Default status | | ------------...
Disable "Schedule Scan Static Task" task
This script disables the "Schedule Scan Static Task" scheduled task. This task is responsible for running update scans at static, predefined intervals. According to the Task Scheduler, this task conducts a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartScan". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Scan Static Task": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🟢 Ready | ...
Disable "Schedule Scan" task
This script disables the "Schedule Scan" scheduled task. This task responsible for periodically scanning for Windows updates. According to the Task Scheduler, this task executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartScan". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Scan": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🟢 Ready | | Windows 11 22H2 | 🟢 Ready | | Windows 11 23H2 | 🟢 Ready |
Disable "Schedule Wake To Work" task
This script disables the "Schedule Wake To Work" scheduled task. This task is responsible for waking the computer from sleep or low-power mode to perform Windows updates. According to the Task Scheduler, this task executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartWork". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Wake To Work": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disa...
Disable "Schedule Work" task
This script disables the "Schedule Work" scheduled task. This task is responsible for scheduling and initiating Windows updates processes at predetermined times. According to the Task Scheduler, this task executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartWork". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Work": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disabled | | Windows ...
Disable "Scheduled Start" task
This script disables the "Scheduled Start" scheduled task. This task initiates the Windows Update service at predetermined times or under specific conditions to perform tasks like checking for and installing updates. According to the Task Scheduler, this task initiates the Windows Update service for scheduled operations like scans. It executes "%SYSTEMROOT%\\System32\\sc.exe start wuauserv". Overview of default task statuses - "\\Microsoft\\Windows\\WindowsUpdate\\Scheduled Start": | OS Version ...
Disable "SmartRetry" task
This script disables the "SmartRetry" scheduled task. This task handles the automatic retrying of failed updates, attempting to redownload or reinstall updates that didn't install successfully on the first try. Microsoft officially documents this task as part of the Windows updates process. Microsoft suggests disabling this task as a measure to reduce data collection and improve performance. This recommendation is also supported by Citrix for optimization purposes. Overview of default task statu...
Disable "Start Oobe Expedite Work" task
This script disables the "Start Oobe Expedite Work" scheduled task. This task is responsible for performing tasks related to the "out-of-box experience" (OOBE) in Windows, such as updating system settings, applications, or features soon after a system update or initial setup. According to the Task Scheduler, its purpose is to perform a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartWork". Overview of default task statuses - `\\Microsoft\\Windows\\UpdateOrchestr...
Disable "StartOobeAppsScan_LicenseAccepted" task
This script disables the "StartOobeAppsScanLicenseAccepted" scheduled task. This task is responsible for initiating a scan of applications as part of the OOBE process, after a license agreement is accepted, verifying that apps are up-to-date. According to the Task Scheduler, its purpose is to perform a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartOobeAppsScan". Overview of default task statuses - `\\Microsoft\\Windows\\UpdateOrchestrator\\StartOobeAppsScanLi...
Disable "StartOobeAppsScan_OobeAppReady" task
This script disables the "StartOobeAppsScanOobeAppReady" scheduled task. This task is responsible for scanning applications during the OOBE phase, verifying that apps are ready for use after system updates. According to the Task Scheduler, it performs a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartOobeAppsScan". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\StartOobeAppsScanOobeAppReady": | OS Version | Default status |...
Disable "StartOobeAppsScanAfterUpdate" task
This script disables the "StartOobeAppsScanAfterUpdate" scheduled task. This task is responsible for scanning applications following a system update, as part of the OOBE process, to verify that all applications are compatible with the new update. According to the Task Scheduler, it performs a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartOobeAppsScanAfterUpdate". Overview of default task statuses - `\\Microsoft\\Windows\\UpdateOrchestrator\\StartOobeAppsScanAft...
Disable "Update Orchestrator Service" ("UsoSvc")
This script disables the Update Orchestrator Service, also known as "Update Orchestrator Service for Windows Update". This service is in charge of managing the download and installation of Windows updates. By default, the service is enabled and set to start up manually. While updates can be crucial for the security of your system, this service can sometimes install them without your approval. This lack of control can pose risks to your privacy, as data might be sent from your system without your...
Disable "UpdateModelTask" task
This script disables the "UpdateModelTask Work" scheduled task. This task is responsible for updating Machine Learning (ML) models related to Windows Updates. According to the Task Scheduler, its purpose is to update ML models and it executes "%SYSTEMROOT%\\System32\\UsoClient.exe StartModelUpdates". Microsoft suggests disabling it for performance optimization and reduced data collection. Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\UpdateModelTask": | OS Version ...
Disable "USO_UxBroker" task
This script disables the "USO_UxBroker" scheduled task. This task is related to the User Experience (UX) Broker process in Windows, managing user notifications or interactions required after an update. According to the Task Scheduler, this task is responsible for triggering a system reboot following update installations. It executes "%SYSTEMROOT%\\System32\\MusNotification.exe". Disabling this task is recommended to reduce data collection and enhance system performance. Overview of default task st...
Disable "UUS Failover Task" task
This script disables the "UUS Failover Task" scheduled task. This task is responsible for the failover mechanism for updates, designed to handle scenarios where a primary update process fails or encounters issues. According to the Task Scheduler, this task is responsible for performing a scheduled Windows Update scan. It executes "%SYSTEMROOT%\\System32\\UsoClient.exe HandleUusFailoverSignal". Overview of default task statuses - "\\Microsoft\\Windows\\UpdateOrchestrator\\UUS Failover Task": | OS Versi...
Disable "WakeUpAndContinueUpdates" task
This script disables the "WakeUpAndContinueUpdates" scheduled task. This task is responsible for waking the computer from sleep to continue or complete pending updates. Overview of default task statuses - "\\Microsoft\\Windows\\InstallService\\WakeUpAndContinueUpdates": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disabled | | Windows 11 23H2 | 🔴 Disabled |
Disable "WakeUpAndScanForUpdates" task
This script disables the "WakeUpAndScanForUpdates" scheduled task. This task is responsible for waking up the system at scheduled times to check for Windows updates. Overview of default task statuses - "\\Microsoft\\Windows\\InstallService\\WakeUpAndScanForUpdates": | OS Version | Default status | | ---------------- | ------ | | Windows 10 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disabled | | Windows 11 23H2 | 🔴 Disabled |
Disable "Windows Update Medic Service" ("WaaSMedicSvc")
This script disables the Windows Update Medic Service ("WaaSMedicSvc") and removes its associated files and registry entries. This service runs continuously in the background and maintains Windows Update components. Disabling this service prevents it from reverting your Windows Update settings, such as re-enabling automatic updates without your permission. This gives you more control over your system's update behavior and settings. This script enhances your privacy by reducing data transmission ...
Disable "Windows Update" ("wuauserv") service
This script turns off the Windows Update service, which is technically known as Windows Update Agent. By disabling this service, the automatic detection, download, and installation of updates for both Windows and other installed programs are halted. Update can often come bundled with changes that could affect your privacy settings or introduce features that collect more of your data. Taking control of when and how updates are applied provides you with the opportunity to review any changes before...
Disable automatic app updates from the App Store
This script disables automatic app updates from the App Store. It prevents automatic installation of application updates as soon as they become available from Apple. Thus, applications are updated only when you choose to do so. Disabling automatic updates prevents unexpected app behavior or settings changes. It helps you to maintain your current app configurations and privacy settings. It also protects against potential zero-day vulnerabilities in your apps. This gives you the ability to choose ...
Disable automatic checks for updates
This script configures macOS using Bash (Shell script).It can be restored. It runs "# For OS X Yosemite and newer (>= 10.10) sudo...".
Disable automatic daily installation of Windows updates
This script stops Windows from automatically installing updates every day. By doing so, you gain control over when update happen on your computer. By default, Windows is set to automatically update every day. Having control over the update timing allows you to review what is being changed, thereby protecting your privacy and enhancing your system's security. Technically, what the script does is remove a specific setting in the computer's system registry, the "ScheduledInstallDay" key from `HKLM\\...
Disable automatic downloads for updates
This script configures macOS using Bash (Shell script).It can be restored. It runs "# For OS X Yosemite and newer (>= 10.10) sudo...".
Disable automatic installation for configuration data (e.g. XProtect, Gatekeeper, MRT)
This script configures macOS using Bash (Shell script).It can be restored. It runs "# For OS X Yosemite and newer (>= 10.10) sudo...".
Disable automatic installation for system data files and security updates
This script stops automatic installations of critical updates, including security and system data file updates. It improves privacy by providing: Users can review updates before installation to ensure they meet privacy standards and do not introduce unwanted telemetry or changes. Reduces how often it connects to update servers, potentially protection user information. Control Over Update Timing: • Reduced External Communications: The script configures the `/Library/Preferences/com.apple....
Disable automatic installation of macOS updates
This script stops macOS from automatically installing updates. This script improves privacy by reducing unwanted data collection and ensuring updates don't change settings or data without your approval. The Center for Internet Security (CIS) advises against automatic updates in scenarios where changes require thorough testing and approval processes to avoid operational disruptions. This script configures following to stop macOS from installing updates automatically: 1. `/Library/Preferences/com....
Disable automatic installation of Windows updates without user consent
This script changes how your Windows computer handles automatic updates by modifying the "AUOptions" registry key. After running this script, your computer will notify you before downloading any updates. In the default setup, your Windows system is configured to download and install updates automatically without notifying you. This means that new updates could be installed on your system without your explicit approval. By forcing Windows to notify you before downloading updates, this script hand...
Disable Automatic Updates (AU) feature
This script disables the Automatic Updates feature on Windows. Automatic Updates downloads and installs updates without requiring explicit user permission. When enabled, it automatically checks for updates from the Windows Update website whenever you are online. By default, Automatic Updates is enabled. Disabling Automatic Updates provides users control over when and how updates are installed. This enhances privacy by minimizing automatic data transfers to Microsoft servers. However, disabling A...
Disable automatically enabling Windows Update Medic Service
This script disables the "upfc.exe" process, preventing it from automatically re-enabling Windows updates. "upfc.exe" is found at "%SYSTEMROOT%\\System32\\upfc.exe". This executable is identified by Microsoft as "Updateability From SCM". SCM refers to the "Service Control Manager (SCM)", a special system process also known as "services.exe". "upfc.exe" is automatically launched by SCM during system startup. It is part of the Windows Update self-healing mechanism. It recovers Windows Update Medic S...
Disable macOS beta release installation
This script configures macOS using Bash (Shell script).It can be restored. It runs "# For OS X Yosemite and newer (>= 10.10) sudo...".
Disable outdated Windows Update tasks
This script disables older scheduled tasks associated with Windows updates, which are no longer present in Windows versions since Windows 10 22H2 and Windows 11 22H2. The script is compatible with Windows 10 and newer versions, skipping any missing tasks on recent systems. These tasks are linked to specific system files and are involved in various update processes, such as downloading and installing updates, rebooting after updates, and more. Disabling these tasks can help reduce unnecessary sys...
Disable scheduled automatic updates
This script turns off the automatic installation of Windows updates that are set to occur at a specific time. By doing this, you take back control over when your computer updates itself. The default behavior is to install updates at 3 AM. Windows updates can be important for system security, but automatic installation could occur at inconvenient times and may even restart your computer without prior warning. This could interrupt your tasks and may send data about your system to external servers....
Disable Windows Update automatic driver updates
This category prevents Windows Update from automatically downloading and installing device drivers. A device driver is essential software that enables Windows to communicate with your computer's hardware components. For example: Graphics cards need drivers to display images properly • Printers need drivers to print documents • Mice and keyboards need drivers to function correctly By default, Windows downloads two types of updates for your devices automatically: Device drivers: Software that ...
Disable Windows Update driver download server
This script blocks Windows from automatically downloading device drivers through Windows Update. By default, Windows uses Windows Update to search for driver updates. This script redirects driver searches from Microsoft's servers to your managed server. This prevents Windows from using Windows Update (WU) for driver searches. This script enhances privacy by: Preventing automatic driver data collection by Microsoft • Keeping your system's hardware information within your organization • Reducing u...
Disable Windows Update driver downloads
This script prevents Windows Update from automatically downloading and installing device driver updates. By default, Windows Update includes driver updates alongside regular system updates. With this script, driver updates will no longer be included in Windows updates. This script improves your privacy by: Blocking automatic connections to third-party driver servers • Reducing data collection during driver installations • Allowing you to control which drivers are updated and when Windows Update ...
Disable Windows Update driver installation wizard
This script disables automatic and manual driver updates through Windows Update. The Windows Update driver wizard is also called Hardware Update Wizard or Update Driver Software Wizard. This tool automatically installs and updates device drivers during Windows Updates or when new hardware is connected. This script disables these automatic driver updates via Windows Update. While automatic updates are convenient, they may install unwanted or outdated drivers, impacting system stability an...
Disable Windows Update driver search
This script prevents Windows Update from automatically finding and installing device drivers. By default, Windows Update searches for device drivers when new hardware is connected. This search aims to find the best drivers, even with limited network access. While automatic driver installation is convenient, it can cause system stability issues: Windows may install drivers incompatible with your hardware • You lose control over the driver versions you prefer to use This script blocks Windows Upd...
Disable Windows Update fallback driver search
This script prevents Windows from searching Windows Update for device drivers when local drivers are not found. By default, Windows automatically searches Windows Update for device drivers. Windows searches for drivers in the following order: Local installation • Removable media (USB drives, CD-ROMs) • Windows Update Running this script removes Windows Update from the driver search locations. It also removes the Windows Update option from the driver installation wizard dialog. After running this...
Disable Windows Update hardware information collection
This script stops Windows from downloading device information and updates from the internet automatically. When you connect a new device to your computer, Windows typically downloads: Software enabling Windows to communicate with your hardware High-resolution icons, product details, and manufacturer information Device drivers: • Device metadata (or device information): By default, Windows automatically searches and downloads this information to help you: Identify and distinguish betw...
Disable Windows update scheduled tasks
This category includes scripts to disable scheduled tasks that are associated with the automatic functioning of the Windows Update service. These tasks are responsible for various background update-related activities such as checking for updates, downloading, and installing them in the background without user intervention. Disabling these tasks grants users more control over when and how updates are applied. This approach is often preferred by those wishing to manually manage updates or avoid un...
Disable Windows update services
The scripts in this category offer users the ability to control Windows services related to system updates. These services manage how and when your system receives updates from Microsoft. By limiting or disabling these services, users can decide when to update their system, reducing unexpected changes. Moreover, a system with fewer running services uses fewer resources, which can improve overall performance. Disabling these update services is also a privacy measure. Some updates can change priva...
Maximize auto-update duration
This category includes scripts designed to extend the intervals between automatic updates. These scripts provide users with greater control over the timing of system updates. By adjusting the schedule of these updates, users can minimize interruptions and potential system instability associated with frequent updates.
Maximize feature update duration (disables resuming updates from settings)
This script provides control over when and how often Windows feature updates and preview builds occur. These updates bring major changes to the operating system, affecting functionality and user privacy. Key aspects of Windows feature updates include: Protecting against behavioral issues. • Adding new features. Registry keys - The script modifies various Group Policy (GPO), state, and Mobile Device Management (MDM) keys. Group Policy (GPO) keys: Used for pausing updates in older Windows 10 versi...
Maximize quality update duration (disables resuming updates from settings)
This script extends the time between mandatory quality updates, which include security patches. Delaying these updates helps prevent frequent system reboots and disruptions, aiding productivity in professional and critical settings. Registry keys - The script modifies various Group Policy (GPO), state, and Mobile Device Management (MDM) keys. Group Policy (GPO) keys: Defers updates and upgrades in earlier versions of Windows 10 (1511). Pauses quality updates for up to 35 days, or until the setti...
Maximize update duration on older Windows versions
This script extends the time between updates and upgrades, but only works on older Windows versions (version 1511 and earlier). The script modifies the following keys: Sets the device to a more predictable update schedule. Pauses quality updates. Determines the delay period for updates. Determines the delay period for upgrades. Pauses upgrades for up to 4 weeks. Pauses upgrades for up to 8 months. Supported values range from 0 to 8, representing the number of months to defer upgrades. Pauses upd...
Maximize update pause duration
This script maximizes the pause duration for system updates via the settings interface. It postpones both feature and quality updates in Windows 10 and Windows 11. This is particularly useful for those preferring fewer interruptions from regular updates. By default, the following registry keys are absent in Windows 10 and Windows 11 and are added only when updates are paused through the user interface: "HKLM\\SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings!PauseFeatureUpdatesStartTime" • `HKLM\\SOFTW...