I think the ISO's purpose was to remove Windows Updates for that reason. You need to run these tools semi-regularly, at least after updates, to ensure Microsoft

I think the ISO's purpose was to remove Windows Updates for that reason. You need to run these tools semi-regularly, at least after updates, to ensure Microsoft hasn't re-enabled stuff. Which they do. All the damn time. You can use /quiet and /force flags on shutup10 and create a scheduled task to re-run it occasionally.