Disable "on setup" forced Windows updates

[fernsx]

Hey people!

Is there any option to disable automatic updates for the first time installation? (windows 10 ltsc 21h2)

Sometimes i forget to disable the lan connection on the virtual machine while im testing the images, and i dont know what updates are downloading/installing.

I'd like this "forced windows updates on setup" be disabled, (just for the setup process) and then stay enabled after the setup is complete.

 

[garlin]

Automatic updates for first-time setup are installed in three ways:

Dynamic Update for Setup
This optional update is applied to the ISO (not install image), and when booted Setup checks online for a more recent CU. If you don't want Setup to change the CU or boot-critical drivers, don't install the DU update.

OOBE ZDP
Windows runs OOBE ZDP (Out of Box Experience Zero Day Patch) to check for critical non-CU updates and install them. ZDP ignores all WU settings that you've changed to disable updates. EdgeUpdater will be pushed to your PC even if Edge was removed.

But you can redirect WU to a fake WSUS server, and ZDP will silently fail.
https://www.ntlite.com/community/index.php?threads/how-to-disable-fodmetadata_client.2653/post-23351

Windows Update
WU starts updating all installed UWP packages (Store apps) in the background, and will try to install Teams.
Teams can be blocked under Settings / Desktop / Teams - Install.

Disabling UWP updates:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
"AutoDownload"=dword:00000002

 

[fernsx]

Automatic updates for first-time setup are installed in three ways:

Dynamic Update for Setup
This optional update is applied to the ISO (not install image), and when booted Setup checks online for a more recent CU. If you don't want Setup to change the CU or boot-critical drivers, don't install the DU update.

OOBE ZDP
Windows runs OOBE ZDP (Out of Box Experience Zero Day Patch) to check for critical non-CU updates and install them. ZDP ignores all WU settings that you've changed to disable updates. EdgeUpdater will be pushed to your PC even if Edge was removed.

But you can redirect WU to a fake WSUS server, and ZDP will silently fail.
https://www.ntlite.com/community/index.php?threads/how-to-disable-fodmetadata_client.2653/post-23351

Windows Update
WU starts updating all installed UWP packages (Store apps) in the background, and will try to install Teams.
Teams can be blocked under Settings / Desktop / Teams - Install.

Disabling UWP updates:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
"AutoDownload"=dword:00000002

thanks for the detailed reply!,
gonna give this a try.