[tpsize=4][tpb]= Block related Windows 10 upgrade and telemetry settings =[/tpb][/tpsize] # Advantages: - get use of latest Windows Update Client which solves the high CPU/Memory scan issue, and perhaps the slow/stuck scan issue - seemingly make the related updates harmless (disabled), thus can safely enable Automatic Updates (as long as 'Recommended' updates option is off) - do not need to keep track of future related updates, or if a new updates version released # Disadvantages: - no one would know what microsoft could come up with, so some blocking settings may get reverted by future updates but you can always run/schedule the blocking script after any updating operation just in case # Script: copy the following and save as W10-Block.cmd then right-click and select 'Run as administrator' [CODE]@echo off %windir%\system32\reg.exe query "HKU\S-1-5-19" 1>nul 2>nul || goto :eof echo. echo Processing telemetry blocking tweaks reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v DisableOSUpgrade /t REG_DWORD /d 1 /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /f /v IncludeRecommendedUpdates /t REG_DWORD /d 0 >nul 2>&1 reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade" /f >nul 2>&1 reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade /v AllowOSUpgrade /t REG_DWORD /d 0 /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Appraiser" /v HaveUploadedForTarget /t REG_DWORD /d 1 /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\AIT" /v AITEnable /t REG_DWORD /d 0 /f >nul 2>&1 reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\ClientTelemetry" /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\ClientTelemetry" /v DontRetryOnError /t REG_DWORD /d 1 /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\ClientTelemetry" /v IsCensusDisabled /t REG_DWORD /d 1 /f >nul 2>&1 reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\ClientTelemetry" /v TaskEnableRun /t REG_DWORD /d 1 /f >nul 2>&1 reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags" /v UpgradeEligible /f >nul 2>&1 reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Appraiser" /f >nul 2>&1 reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\TelemetryController" /f >nul 2>&1 sc.exe config DiagTrack start= disabled >nul 2>&1 sc.exe stop DiagTrack >nul 2>&1 reg delete HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener /f >nul 2>&1 reg delete HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener /f >nul 2>&1 reg delete HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\SQMLogger /f >nul 2>&1 reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack /f >nul 2>&1 reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /f >nul 2>&1 takeown /f %ProgramData%\Microsoft\Diagnosis /A /r /d y >nul 2>&1 icacls %ProgramData%\Microsoft\Diagnosis /grant:r *S-1-5-32-544:F /T /C >nul 2>&1 del /f /q %ProgramData%\Microsoft\Diagnosis\*.rbs >nul 2>&1 del /f /q /s %ProgramData%\Microsoft\Diagnosis\ETLLogs\* >nul 2>&1 schtasks /Change /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE >nul 2>&1 schtasks /Change /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE >nul 2>&1 schtasks /Change /TN "\Microsoft\Windows\Application Experience\AitAgent" /DISABLE >nul 2>&1 schtasks /Delete /F /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" >nul 2>&1 schtasks /Delete /F /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater" >nul 2>&1 schtasks /Delete /F /TN "\Microsoft\Windows\Application Experience\AitAgent" >nul 2>&1[/CODE] Note: - some of the commands may return error (task or registry key not found), you can ignore that # Schedule task: to make sure the blocking settings are always set, you can create a schedule task to run the script at logon as example 1- copy W10-Block.cmd to C:\Windows directory 2- open command prompt as administrator and execute: [CODE]SCHTASKS /Create /F /RU "SYSTEM" /RL HIGHEST /SC ONLOGON /TN BlockW10 /TR "cmd /c %windir%\W10-Block.cmd" SCHTASKS /Run /I /TN BlockW10[/CODE] Original post: https://forums.mydigitallife.info/threads/68131-Prevent-Windows-10-Upgrade Disclaimer: Use at your own risk.