Regarding Automatic Updates even if you completely disable this feature, it's not 100% disabled and MS find a way of activating again. It happened more than once with the LTSC version on the company. But anyway we get rid off most of the junk that stutters our computers and net connections. There are other ways of blocking autoupdate feature like creating a localhost loop for example. ShutUp10++
https://www.oo-software.com/en/shutup10
There is NO WAY I am willing to put up with that behaviour.
I have found their ways of how they get it turned back on. I managed to sort a Pro edition by disabling and stripping a lot of things out of it in 2019 with a lot of anger and frustration to a point where I started to see stars in my eyes:
https://www.eevblog.com/forum/general-computing/windows-10-update-aggro/ I would take the disk in and out, do a backup, disable a group services I suspect maybe the culprit, put it back to find out if the Windows updater would turn back on secretly, and find what doesn't work as a result.
Sorted out a 2016 LTSB but I found that the LTSC 2019 was a lot of work.
Three services re-enables the "Windows update" service.
Waasmedic.exe (can be removed)
Uscore USOSVC (that runs within the new netframe pcsettings thing but not practical to remove that. When going into pc settings and update it would just quit.
Rempl (can be removed)
Just remembered another one:
OSRSS (can be removed)
To make it easier to obtain permissions:
https://www.tenforums.com/attachments/tutorials/314256d1610376708-add-take-ownership-context-menu-windows-10-a-add_take_ownership_to_context_menu.regWhen Usosvc runs, it would use the "SYSTEM" account to reset permissions into C:\Windows\System32\Tasks\Microsoft\Windows\updateorchestrator which is set to deny write permissions to user accounts and it's registry equvialent (using "Trusted Installer")
I took the disk out and connected up to another one running Windows 7:
I found the copy of Windows 10 Pro was on a GPT partition and I had to convert it to a basic disk to be able to do anything and then convert it back afterwards I was finished. They say you can't but I happened to do so, just don't clean disk. (Can't remember all the details.)
Mount the system registry and find USOSVC to set
Find
USOCORE, USOSVC in registry settng and set type to 10 (to give 16) and set type to 4 to disable for now so it can't reset the permissions.
I removed rempl, Waas medic,
osrss, services in registry system/currentcontrolset/services (present on LTSC), that turns on the Windows update.
That will then allow you to set startup type, I think I also set system deny permission to write to that key.
In: C:\Windows\System32\Tasks\Microsoft\Windows\updateorchestrator, take ownership open notepad or text editor, copy the names down, save it to the drive and delete everything in the folder.
Go into the registry and search for \Microsoft\Windows\UpdateOrchestrator\
remove everything in there but don't delete the key.
Then search for the components on that list like this one:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\Microsoft\Windows\UpdateOrchestrator
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A20E027D-A9EE-4CFF-B07B-98990E3C4602}
\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot
Remove everything in there and note the names down.
Now put back the drive, find the keys again in registry, go into permissions, set deny to "Trusted Installer" and read only for system.
Set read only permissions for "SYSTEM" account "C:\Windows\System32\Tasks\Microsoft\Windows\updateorchestrator"
I didn't have to do any of that in an LTSB version.
Now when starting USOSVC it shouldn't be able to rewrite it's entries and default everything.
See screenshot of one I got perfect and behaves which is my template copy.
When I want another copy I just copy that and buy a key to save a lot of work and aggravation.
Thats not the only thing, there are other stuff I removed like some telemetry components that don't seem to respect group policies, certain notifications and annoyances.