Hacker News new | ask | show | jobs
by 9x39 252 days ago
Hopefully everyone uses an Enterprise SKU of Windows so you can just control it with Group Policy.

On Enterprise, you can use its built-in App Locker features to block the execution of any Windows component. I've used it to block Windows Update completely at home after it filled my drive to the last byte and I was sick of my gaming box disobeying.