Never did this on windows 10, no idea how effective it is on 10, but what I did was disable the update service, disable the software protection/licensing servic

Never did this on windows 10, no idea how effective it is on 10, but what I did was disable the update service, disable the software protection/licensing service, and set both exes to deny execute permissions to everybody in the security tab of the files. Genuine goes away, updates can't start, and even if updates come back, your windows isn't genuine anymore, so you don't get all of the updates, just the major security ones. During GWX, I just issued the command to reset my activation to ensure genuine never came back, blocking the licensing exec also kept the notifications from showing.