These are sledgehammers and in some cases not easily reversed.
Run to disable Windows update with group policy (requires Pro, Education, or Enterprise)
If you have windows defender active when you download this file
I apologize for the shorthand, I tried to add comments where they might be helpful.
caveat emptor x infinty