Windows 7 from Windows 10. How to make the same obedient?

Question

System administration

Good day gentlemen. I'm in trouble with newfangled Windows 10. By group policies, I configured the Windows update settings so that they are installed with the permission of the user. Raised the Wsus Server, specified it as a source of updates. Didn't upload anything to the update server, didn't approve any update.
After a couple of weeks, Windows 10 started installing some updates. We sit and wait and paralyze the work.
On windows 7 everything worked fine, the system listened to you. Windows 10 puts some applications, updates come that I did not approve, driver updates, and I only allow installation if necessary.

Here, in fact, the question of the gentlemen, how to put windows 10 on its knees?

Answer 1

In fact, Windows 10 has more control over the upgrade process than Windows 7 had. But who reads the documentation these days ?
So keep your templates up to date, explore new features, and tweak your group policies. If everything is done correctly, then the downtime due to updates will tend to zero, even when switching to new versions.

Answer 2

Put ltsc. This is the easiest way.
Or configure through policies - it's more complicated, but it also works.

Answer 3

With each update, Windows puts spokes in the wheels of its users. As soon as the Great Minds found a way to disable updates, a new assembly comes out - and this method no longer works there.

how to bring windows 10 to its knees

Install an old build where the way to disable updates works.
The first builds worked fine for me (of course, after disabling updates and other "useful" functions. Then it got worse. Windows 10 killed my hdd(namely hdd). Despite the fact that immediately after installation, the disk is constantly loaded at 100% (only downloaded chrome). According to my observations, it became clear that the latest builds (for a couple of years) are not friendly with hdd. Realized only after Windows killed my hdd. I bought an ssd and a miracle, the disk in the task manager is almost not loaded and the disk indicator does not blink like a Christmas tree. But the joy was not long. They began to load 100% both microsoft malware, telemetry, and several other malicious Microsoft applications. Every few days, incomprehensible updates are installed, after which the laptop reboots for about half an hour. In short, I began to use Windows only in an extremely rare case. My laptop is more precious to me than the mythical whistles / fakes of Microsoft.
There are several options here. Either roll back to Windows 7, or even change Microsoft Malware to another OS. Or reconcile and leave everything as it is.
True, if it is in the office, then everything is sad.
Try to search the Internet for ip addresses from which updates are made and blacklist them, along with all Microsoft addresses. But I think they should be kept in the strictest confidence and often changed, because one could simply block these addresses in the router.
PS: I don't understand why companies use Windows? They are not embarrassed by the fact that she (OS) sends data to no one knows where?

Answer 4

shoot win10, install win7.

Answer 5

Install the ltsc version. Or smokeiebla builds.
There is a stupid shortcut to disable / enable
Licenses for you to assemble it will pull up

Answer 6

Disable Dual Scan through policies.
This technology adds a second channel to receive updates directly from Microsoft Update, even if WSUS is configured.
https://blogs.technet.microsoft.com/wsus/2017/08/0...