Downloads

Using Update Control

Download the single EXE. When using the application, select a mode using its full card, review the selected-mode label, then choose Apply. Selecting or cancelling a choice does not change Windows settings. Hard Block requires a separate confirmation and also stops Store downloads. You can review choices with read-only access; applying changes requires administrator access.

Moving from an older blocker? Select Unblock updates, then Unblock & remove tasks. Follow any restart message before reopening the app. For Store downloads, select Store Friendly, then Apply Store Friendly. This mode supports Pro, Enterprise, Education and IoT Enterprise; use Windows Settings' pause controls on Home.

The EXE embeds the scripts, validates their SHA-256 and extracts them to a protected folder before opening the interface.

Preview status: Version 4.3.1 is an unsigned development candidate. The earlier 4.2.2 Defender detection remains unresolved, and this candidate has no vendor determination. Do not bypass security warnings to use it. Automated tests do not establish antivirus acceptance or prove Windows Update blocking or Store installation on your PC. Legacy original settings cannot be reconstructed exactly.

4.3.1 — Current preview

• Shows the saved mode separately from live verification: Verified, Awaiting verification or Needs attention. System details lists the individual checks.
• Checks the Hard Block watchdog's configuration and script hash, then waits for a successful watchdog check before reporting Verified.
• Shows progress while services stop, waits through pending transitions and retries transient busy-service responses.
• Identifies services that need a restart when saved startup settings still differ from Windows' live settings. Windows is not restarted automatically; a restart-required result is not yet fully verified.
• Unblock & remove tasks disarms enforcement, removes recognized legacy and current watchdog tasks plus their installed script and health record, and restores saved settings where a v4 backup exists.
• Store Friendly keeps shared download services available without a watchdog. Manual updates, pending installations and organization policies can still apply.

4.2.2 — Clear mode selection and Apply

• Replaces static mode cards with full-card radio controls: heading, description and padding all select the option.
• Separates the pending selection from the current Windows mode. Selection and cancellation never execute a controller action.
• Adds one action bar that stays visible in small windows, with a clear selected-mode label and explicit reasons when Apply is unavailable.
• Keeps selection during automatic status refreshes and supports reviewing choices with read-only access.
• Isolates the Hard Block confirmation from the underlying page and ignores duplicate confirmation events after it closes.
• Adds hit-target and accessibility-provider interaction tests plus updated screenshots and usage instructions. The controller's update/restore behavior is unchanged.

4.2.1 — Icon and publisher-signing preparation

• Adds an original update/pause icon with seven Windows icon sizes and a reusable 1024 pixel PNG; applies it to the EXE, window/taskbar icon, title bar and sidebar.
• Keeps the icon in the embedded and portable packages and adds copyright metadata.
• Adds an optional trusted-certificate signing helper with SHA-256, RFC 3161 timestamping, signature verification and refreshed release checksums.
• Explains UAC, SmartScreen reputation, antivirus detection and the vendor false-positive process. The release remains unsigned; no warning-free or antivirus-approved claim is made.
• Update-control, service and watchdog behavior is unchanged.

4.2.0 — Desktop preview

• Replaces the batch menu with a native dark WPF interface: overview, system details, activity, progress, diagnostics, explicit error/restart results and Hard Block confirmation.
• Adds a single EXE download that embeds the scripts, validates their SHA-256, extracts to a protected folder, and launches the GUI. Keeps a portable ZIP and console fallback.
• Adds Store Friendly mode for supported editions: manual automatic-update policy with shared Store dependencies available and no watchdog.
• Uses one Hard Block guardian task with startup and minute triggers instead of several independent watchdogs.
• Disarms state before removal, searches every task folder, retries deletion and verifies zero remaining known tasks.
• Migrates both the original repository's WU-Guardian names and the later POS-WU-Guardian names and command folders.
• Preserves a baseline across mode changes, restores original policy/service startup values, prevents concurrent operations, and attempts rollback on failed transitions.
• Adds local regression tests, GUI previews, package verification, and hosted Windows integration using temporary services and a real SYSTEM task.
• Documents limits: no universal update-blocking guarantee, unsigned EXE, legacy original settings cannot be reconstructed exactly, and real client/Store validation remains outstanding.

The original batch script remains available through the application's Git history. Existing WU-ManagerFinal.bat users can use the same filename to launch the new interface after extracting the full package.