How does the Windows Update service - wuaueng.dll start?

Question

Windows

Hello.
Disabled the Windows 10 update service. Delivered to it "Guest" as the user for start. Now it cannot start. Fine.
But someone is still trying to turn it on. And after this fails, the message "Something prevented the installation of the component" appears: Of

course, you can simply disable notifications for system events, or delete the wuaueng.dll file , but I would like to get rid of the cause, not the symptom :) I would like to understand who and from where is trying to start this service.
How to do it?
PS I did not find the corresponding triggers in the Scheduler.

Answer 1

In general, it turned out that the " Windows Modules Installer " is behind the Update Center . It is he who tries to start the Update Center , and if it fails, it shows a pop-up notification. So the Windows Modules Installer also had to be disabled)) Notifications stopped pouring in. All OK. However, if you look in the Event Log , you can see that errors continue to occur. Now, because TrustedInstaller tries to run the Windows Modules Installer , but it fails. I haven’t figured out what to do with this yet, and I don’t really want to)) But if someone has thoughts, write.

Answer 2

Can't find it in the planner

There is a task:

<?xml version="1.0" encoding="UTF-16"?>
<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
  <RegistrationInfo>
    <Source>Корпорация Майкрософт.</Source>
    <Author>Корпорация Майкрософт.</Author>
    <Description>Эта задача используется для запуска службы Центра обновления Windows, когда требуется выполнить запланированные операции, например проверки.</Description>
    <URI>\Microsoft\Windows\WindowsUpdate\Scheduled Start</URI>
    <SecurityDescriptor>D:(A;;FA;;;SY)(A;;FRFX;;;LS)(A;;FA;;;BA)</SecurityDescriptor>
  </RegistrationInfo>
  <Triggers>
    <TimeTrigger>
      <StartBoundary>2018-11-25T10:59:41+03:00</StartBoundary>
      <Enabled>true</Enabled>
      <RandomDelay>PT1M</RandomDelay>
    </TimeTrigger>
    <SessionStateChangeTrigger>
      <Enabled>false</Enabled>
      <StateChange>ConsoleDisconnect</StateChange>
    </SessionStateChangeTrigger>
    <SessionStateChangeTrigger>
      <Enabled>false</Enabled>
      <StateChange>RemoteDisconnect</StateChange>
    </SessionStateChangeTrigger>
    <WnfStateChangeTrigger>
      <Enabled>false</Enabled>
      <StateName>7508BCA3380C960C</StateName>
      <Data>01</Data>
      <DataOffset>0</DataOffset>
    </WnfStateChangeTrigger>
  </Triggers>
  <Principals>
    <Principal id="LocalSystem">
      <UserId>S-1-5-18</UserId>
      <RunLevel>LeastPrivilege</RunLevel>
    </Principal>
  </Principals>
  <Settings>
    <MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
    <StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
    <AllowHardTerminate>true</AllowHardTerminate>
    <StartWhenAvailable>true</StartWhenAvailable>
    <RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
    <IdleSettings>
      <Duration>PT10M</Duration>
      <WaitTimeout>PT1H</WaitTimeout>
      <StopOnIdleEnd>true</StopOnIdleEnd>
      <RestartOnIdle>false</RestartOnIdle>
    </IdleSettings>
    <AllowStartOnDemand>false</AllowStartOnDemand>
    <Enabled>true</Enabled>
    <Hidden>false</Hidden>
    <RunOnlyIfIdle>false</RunOnlyIfIdle>
    <DisallowStartOnRemoteAppSession>false</DisallowStartOnRemoteAppSession>
    <UseUnifiedSchedulingEngine>true</UseUnifiedSchedulingEngine>
    <WakeToRun>false</WakeToRun>
    <ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
    <Priority>7</Priority>
  </Settings>
  <Actions Context="LocalSystem">
    <Exec>
      <Command>C:\WINDOWS\system32\sc.exe</Command>
      <Arguments>start wuauserv</Arguments>
    </Exec>
  </Actions>
</Task>