It depends. On the one hand, you should at least keep (critical) security gaps closed. On the other hand, there is no need for (constant) updates if a system works. Especially because Microsoft sometimes (intentionally or not) changes more than desired or necessary. However, you can skip the deactivation of Windows Update or adjust the script accordingly (especially for the automatic process).
Edit Converted your complete NOOBS tool into a Bat Script | working without any hassle : Code: @echo off for %%z in ( PolicyAgent RasMan RemoteAccess RemoteRegistry SessionEnv TermService UmRdpService AxInstSV BITS CDPSvc CDPUserSvc* dmwappushservice DusmSvc InstallService iphlpsvc lfsvc NcaSvc NcbService NetTcpPortSharing OneSyncSvc* PushToInstall SharedAccess SSDPSRV TokenBroker TrkWks tzautoupdate upnphost wisvc wlidsvc WpnService WpnUserService* MapsBroker TabletInputService WbioSrvc diagnosticshub.standardcollector.service diagsvc DiagTrack DPS PcaSvc SysMain TroubleshootingSvc WdiServiceHost WdiSystemHost wercplsupport WerSvc AppVClient MessagingService RetailDemo SgrmBroker shpamsvc stisvc UevAgentService XboxGipSvc UsoSvc WaaSMedicSvc wuauserv ) do ( Powershell -C "SP 'HKLM:SYSTEM\ControlSet001\Services\%%z' -Name 'Start' -Value '4' -Force -EA 0 -Verbose" ) reg add "HKLM\SOFTWARE\Policies\Microsoft\Speech" /t REG_DWORD /v AllowSpeechModelUpdate /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /t REG_DWORD /v DODownloadMode /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v DeferUpdatePeriod /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v DeferUpgrade /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v DeferUpgradePeriod /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v DoNotConnectToWindowsUpdateInternetLocations /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v SetDisableUXWUAccess /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /t REG_DWORD /v SetProxyBehaviorForUpdateDetection /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /t REG_DWORD /v AUOptions /d 2 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /t REG_DWORD /v NoAutoRebootWithLoggedOnUsers /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /t REG_DWORD /v NoAutoUpdate /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /t REG_DWORD /v UseWUServer /d 1 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization" /t REG_DWORD /v SystemSettingsDownloadMode /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /t REG_DWORD /v DODownloadMode /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /t REG_DWORD /v AutoDownload /d 2 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v AddressBarMicrosoftSearchInBingProviderEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v AlternateErrorPagesEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v AutofillAddressEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v AutofillCreditCardEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v ConfigureDoNotTrack /d 1 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v EdgeShoppingAssistantEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v LocalProvidersEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v MetricsReportingEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v NetworkPredictionOptions /d 2 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v PaymentMethodQueryEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v PersonalizationReportingEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v ResolveNavigationErrorsUseWebService /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v SearchSuggestEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v SendSiteInfoToImproveServices /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v SmartScreenEnabled /d 0 /f reg add "HKCU\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v UserFeedbackAllowed /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v AutofillCreditCardEnabled /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /t REG_DWORD /v UserFeedbackAllowed /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /t REG_DWORD /v AllowTabPreloading /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Clipboard" /t REG_DWORD /v EnableClipboardHistory /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\TabletTip\1.7" /t REG_DWORD /v EnableTextPrediction /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps" /t REG_DWORD /v AgentActivationLastUsed /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /t REG_DWORD /v GlobalUserDisabled /d 1 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /t REG_DWORD /v BingSearchEnabled /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /t REG_DWORD /v CortanaEnabled /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /t REG_DWORD /v SearchboxTaskbarMode /d 0 /f reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Windows Search" /t REG_DWORD /v CortanaConsent /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\OneDrive" /t REG_DWORD /v PreventNetworkTrafficPreUserSignIn /d 1 /f reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Bluetooth" /t REG_DWORD /v AllowAdvertising /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Browser" /t REG_DWORD /v AllowAddressBarDropdown /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /t REG_DWORD /v Enabled /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /t REG_DWORD /v AllowTelemetry /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Privacy" /t REG_DWORD /v TailoredExperiencesWithDiagnosticDataEnabled /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting" /t REG_DWORD /v Disabled /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Biometrics" /t REG_DWORD /v Enabled /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /t REG_DWORD /v DontOfferThroughWUAU /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /t REG_DWORD /v DontReportInfectionInformation /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /t REG_DWORD /v AITEnable /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /t REG_DWORD /v DisablePCA /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /t REG_DWORD /v DisableUAR /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /t REG_DWORD /v DisableWindowsSpotlightFeatures /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CredUI" /t REG_DWORD /v DisablePasswordReveal /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /t REG_DWORD /v AllowTelemetry /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\HandwritingErrorReports" /t REG_DWORD /v PreventHandwritingErrorReports /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" /t REG_DWORD /v DisableSensors /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Maps" /t REG_DWORD /v AllowUntriggeredNetworkTrafficOnSettingsPage /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Maps" /t REG_DWORD /v AutoDownloadAndUpdateMapData /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Messaging" /t REG_DWORD /v AllowMessageSync /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /t REG_DWORD /v NoLockScreenCamera /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /t REG_DWORD /v AllowCrossDeviceClipboard /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /t REG_DWORD /v EnableCdp /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /t REG_DWORD /v EnableSmartScreen /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\TabletPC" /t REG_DWORD /v PreventHandwritingDataSharing /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /t REG_DWORD /v Disabled /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v AllowCloudSearch /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v AllowCortana /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v AllowCortanaAboveLock /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v AllowSearchToUseLocation /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v ConnectedSearchUseWeb /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v ConnectedSearchUseWebOverMeteredConnections /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /t REG_DWORD /v DisableWebSearch /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /t REG_DWORD /v DisableAntiSpyware /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" /t REG_DWORD /v NoGenTicket /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\WMDRM" /t REG_DWORD /v DisableOnline /d 1 /f reg add "HKLM\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration" /t REG_DWORD /v Status /d 0 /f reg add "HKLM\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet" /t REG_DWORD /v EnableActiveProbing /d 0 /f reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /t REG_DWORD /v DisableLargeMtu /d 0 /f reg delete "HKCR\*\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\Directory\Background\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\Directory\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\Directory\shellex\CopyHookHandlers\Sharing" /f reg delete "HKCR\Directory\shellex\PropertySheetHandlers\Sharing" /f reg delete "HKCR\Drive\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\Drive\shellex\PropertySheetHandlers\Sharing" /f reg delete "HKCR\LibraryFolder\background\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\UserLibraryFolder\shellex\ContextMenuHandlers\Sharing" /f reg delete "HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}" /f reg delete "HKCR\CLSID\{450D8FBA-AD25-11D0-98A8-0800361B1103}\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}" /f reg delete "HKCR\Directory\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}" /f reg delete "HKCR\Drive\shellex\ContextMenuHandlers\{596AB062-B4D2-4215-9F74-E9109B0A8153}" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.3mf\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.bmp\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.fbx\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.gif\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.glb\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.jfif\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.jpe\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.jpeg\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.jpg\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.obj\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.ply\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.png\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.stl\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.tif\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.tiff\Shell\3D Edit" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.3ds\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.3mf\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.dae\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.dxf\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.obj\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.ply\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.stl\Shell\3D Print" /f reg delete "HKLM\SOFTWARE\Classes\SystemFileAssociations\.wrl\Shell\3D Print" /f pause Pl cross check if you disable "wlansvc netprofm nlasvc" results in no network icon at taskbar tray . plus some group policies your tool apply is user end not a machine end policy. plus dont like the GUI of taskbar after anybody used your script hence i deprecated that . plus hosts file & power policies are not needed to be deployed at user machine as user already have done the best of his or her settings .why setting power policy to command cpu for minimum power to always use 100 pecent power very bad .pl improve your tool again . pl leep it up