SP Windows Update Blocker
Windows Update is not one switch. Services, scheduled tasks, downloads, orchestration, and repair components can bring update activity back after a simple service stop. SP Windows Update Blocker is being built to hold the complete perimeter, respond when update components return, clean up safe resumable work, and keep a permanent record of what happened.
Stopping one service does not stop the whole update system.
Windows can restart update services, re-enable scheduled work, resume background transfers, repair disabled components, and continue partial downloads after reboot. Clearing one cache or killing one process does not provide a durable answer.
Hold the perimeter and show the receipts.
A privileged Windows service will enforce the selected blocked state while a tray dashboard shows health, incidents, cleanup, and alerts. Every incident will pair the Windows action with the exact response taken to contain it.
Prevent. Stop. Clean. Verify.
The interface will stay simple while the service handles the complicated Windows plumbing behind it.
Prevent
Apply and verify the Windows policies, service controls, and scheduled protections that keep automatic update activity from starting.
Contain
Ask an unauthorized component to stop normally, then use controlled escalation only when graceful stopping fails and servicing safety permits it.
Clean
Cancel attributable transfers and remove safe incomplete update content so repeated resurrection cannot finish the same download a little at a time.
Verify
Recheck policies, services, tasks, downloads, pending servicing, and Windows logs before declaring the perimeter secure.
What Windows did. What the blocker did about it.
Windows
2026-07-20 02:32:18 PM
Update Orchestrator started without an authorized update window and opened a new scan session.
Response
2026-07-20 02:32:19 PM
Requested a graceful stop, verified the service stopped, cancelled the surviving transfer, cleaned the incomplete payload, and observed the perimeter for renewed activity.
A small dashboard backed by a persistent Windows service.
Two Clear States
Updates Blocked or Updates Allowed. Administrator approval is required to change the machine-wide state.
Tray-First Status
Green when updates are blocked, red when they are allowed, and an attention-getting amber condition when protection cannot be verified.
Full Perimeter Audits
Scheduled checks examine update policies, services, tasks, transfers, storage, pending work, and relevant Windows records.
Startup Look-Back
After reboot or service recovery, inspect the observation gap so update activity cannot disappear simply because it happened before the tray appeared.
Defender Kept Current
Keep Microsoft Defender enabled and update its security intelligence independently while ordinary Windows and Microsoft updates remain blocked.
Readable Exports
Copy or export a health header and recent incident history for an administrator without requiring administrator rights just to see what happened.
Without the blocker
- One service is stopped while another component restarts the workflow.
- Partial downloads survive and continue later.
- Early-boot activity can happen before anyone is watching.
- There is no plain record connecting an update action to the attempted response.
With SP Windows Update Blocker
- A service watches the complete known Windows Update perimeter.
- Safe cleanup removes resumable work after containment.
- Startup audits inspect both current state and the prior observation gap.
- Every incident records Windows and Response lines with date and time.
In active design and development.
SP Windows Update Blocker is not available for download yet. The Windows 11 x64 service, tray application, audit system, cleanup safeguards, installer, and update-component test matrix must be implemented and verified before a public build is offered.
Simple outside
Two operating states and a focused dashboard.
Careful inside
Do not interrupt active package servicing when doing so could corrupt Windows.
Freeware
Planned as a free Source Potato utility with no usage telemetry.
Windows Update should not get to work in the dark.
This page will gain screenshots, final icons, verified downloads, license details, and SHA-256 checksums as the product reaches release.