问题现象
Windows Update服务已经在服务管理器中禁用，但是莫名奇妙的会被自动设置为手动，并会自动下载补丁。
原因
微软加强了系统更新服务的保护措施，导致按照原有的禁用服务方法，能够随时被恢复。
解决方案
将Windows Update和Windows Update Medic Service全部设置为禁用。
将Windows Update和Windows Update Medic Service服务属性->恢复选项卡中，第一次失败、第二次失败，改为无操作。
由于Windows Update Medic Service服务有系统保护，通过服务管理器无法直接修改，因此提供了注册表，导入注册表即可实现修改。
也可以照着注册表自己手工修改。
注册表
Windows Registry Editor Version 5.00 #彻底禁用Win10自动更新服务：Windows Update [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wuauserv] "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ 00,00,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Start"=dword:00000004 #彻底禁用Win10自动更新服务：Windows Update Medic Service [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WaaSMedicSvc] "FailureActions"=hex:84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ 00,00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,\ 00 "Start"=dword:00000004 #彻底禁用Win10自动更新服务：Windows Update [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv] "FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ 00,00,00,00,00,60,ea,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 "Start"=dword:00000004 #彻底禁用Win10自动更新服务：Windows Update Medic Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc] "FailureActions"=hex:84,03,00,00,00,00,00,00,00,00,00,00,03,00,00,00,14,00,00,\ 00,00,01,00,00,00,c0,d4,01,00,01,00,00,00,e0,93,04,00,00,00,00,00,00,00,00,\ 00 "Start"=dword:00000004
批处理禁止自动更新服务
@echo off
>nul 2>&1 "%SYSTEMROOT%\system32\cacls.exe" "%SYSTEMROOT%\system32\config\system"
if '%errorlevel%' NEQ '0' (goto UACPrompt) else ( goto gotAdmin )
:UACPrompt
echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
echo UAC.ShellExecute "%~s0", "", "", "runas", 1 >> "%temp%\getadmin.vbs"
"%temp%\getadmin.vbs"
exit /B
:gotAdmin
if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
pushd "%CD%"
CD /D "%~dp0"
@echo off
net stop wuauserv
sc config wuauserv start= disabled
@echo on
del %0
exit