WinUpdateBlocker-enable.ps1

$services = @(
    "WaasMedicSvc",    # WaaS Medic Service
    "UsoSvc",          # Update Session Orchestrator
    "PushToInstall",   # Push to Install
    "BITS",            # Background Intelligent Transfer Service
    "DoSvc"            # Delivery Optimization
)

# Function to set services correctly
function Restore-Service {
    param (
        [string]$Name,
        [string]$StartupType
    )

    # Set the startup type correctly
    if ($StartupType -eq "AutomaticDelayedStart") {
        # Use registry for Automatic (Delayed Start)
        Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\$Name" -Name "Start" -Value 2
        Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\$Name" -Name "DelayedAutoStart" -Value 1
    }
    else {
        # Use Set-Service for other types
        Set-Service -Name $Name -StartupType $StartupType
    }

    # Try to start the service
    Start-Service -Name $Name -ErrorAction SilentlyContinue
}

# Restore each service with its proper startup type
Restore-Service -Name "WaasMedicSvc" -StartupType Manual
Restore-Service -Name "UsoSvc" -StartupType AutomaticDelayedStart
Restore-Service -Name "PushToInstall" -StartupType Manual
Restore-Service -Name "BITS" -StartupType AutomaticDelayedStart
Restore-Service -Name "DoSvc" -StartupType AutomaticDelayedStart
Restore-Service -Name "wuauserv" -StartupType Manual

# Start the necessary services
Start-Service -Name "UsoSvc" -ErrorAction SilentlyContinue
Start-Service -Name "BITS" -ErrorAction SilentlyContinue
Start-Service -Name "DoSvc" -ErrorAction SilentlyContinue
Start-Service -Name "wuauserv" -ErrorAction SilentlyContinue

$tasks = @(
    "\Microsoft\Windows\InstallService\RestoreDevice",
    "\Microsoft\Windows\InstallService\ScanForUpdates",
    "\Microsoft\Windows\InstallService\ScanForUpdatesAsUser",
    "\Microsoft\Windows\InstallService\SmartRetry",
    "\Microsoft\Windows\InstallService\WakeUpAndContinueUpdates",
    "\Microsoft\Windows\InstallService\WakeUpAndScanForUpdates"
)
foreach ($task in $tasks) {
    schtasks /Change /TN $task /Enable
}

$taskPatterns = @(
    "Microsoft\Windows\WindowsUpdate\*",
    "Microsoft\Windows\UpdateOrchestrator\*",
    "Microsoft\Windows\WaaSMedic\*"
)
foreach ($pattern in $taskPatterns) {
    # Get all matching tasks
    $tasks = Get-ScheduledTask | Where-Object { $_.TaskPath -like "\$pattern" }

    foreach ($task in $tasks) {
        try {
            # Enable the task using schtasks
            $taskFullPath = "$($task.TaskPath.TrimStart("\"))$($task.TaskName)"
            schtasks /Change /TN "$taskFullPath" /Enable
            Write-Host "Enabled scheduled task: $taskFullPath" -ForegroundColor Green
        } catch {
            Write-Host "Failed to enable task: $taskFullPath" -ForegroundColor Red
        }
    }
}

Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name "NoAutoUpdate" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name "AUOptions" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name "NoAutoRebootWithLoggedOnUsers" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" -Name "PauseFeatureUpdatesStartTime" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\Settings" -Name "PauseQualityUpdatesStartTime" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Name "DisableAntiSpyware" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "DoNotConnectToWindowsUpdateInternetLocations" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceMetadata" -Name "PreventDeviceMetadataFromNetwork" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" -Name "SearchOrderConfig" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" -Name "DontSearchWindowsUpdate" -ErrorAction SilentlyContinue
Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore" -Name "AutoDownload" -ErrorAction SilentlyContinue
#Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" -Name "AllowBuildPreview" -ErrorAction SilentlyContinue

$processes = @(
    "EOSnotify.exe",
    "SipNotify.exe",
    "GWX.exe",
    "GWXUX.exe",
    "UsoClient.exe",
    "MusNotifyIcon.exe",
    "MusNotification.exe",
    "MusNotificationUx.exe",
    "Windows10UpgraderApp.exe",
    "Windows10Upgrade.exe",
    "UpdateAssistant.exe",
    "remsh.exe",
    #"dismHost.exe",
    "SIHClient.exe",
    "InstallAgent.exe",
    "WaaSMedic.exe",
    "WaasMedicAgent.exe",
    "upfc.exe"
)
foreach ($process in $processes) {
    Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\$process" -Name "Debugger" -ErrorAction SilentlyContinue
}

Remove-MpPreference -ExclusionPath "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate"
Remove-MpPreference -ExclusionPath "C:\Windows\System32\Tasks\Microsoft\Windows\InstallService"
Remove-MpPreference -ExclusionPath "C:\Windows\System32\Tasks\Microsoft\Windows\WindowsUpdate"
Remove-MpPreference -ExclusionPath "C:\Windows\System32\Tasks\Microsoft\Windows\UpdateOrchestrator"
Remove-MpPreference -ExclusionPath "C:\Windows\System32\Tasks\Microsoft\Windows\WaaSMedic"

$osCaption = (Get-CimInstance -ClassName Win32_OperatingSystem).Caption
if ($osCaption -like "*Windows 10*") {
    Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "ProductVersion" -ErrorAction SilentlyContinue
    Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "TargetReleaseVersion" -ErrorAction SilentlyContinue
    Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "TargetReleaseVersionInfo" -ErrorAction SilentlyContinue
	
	Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore" -Name "DisableOSUpgrade" -ErrorAction SilentlyContinue
	Remove-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" -Name "DisableOSUpgrade" -ErrorAction SilentlyContinue
	Remove-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade" -Name "AllowOSUpgrade" -ErrorAction SilentlyContinue
	Remove-ItemProperty -Path "HKLM:\SYSTEM\Setup\UpgradeNotification" -Name "UpgradeAvailable" -ErrorAction SilentlyContinue
}

#Remove-NetFirewallRule -DisplayName "Block Windows Update"