Win10/Win11 one-click maintenance: updates, antivirus, repair

1. [Short term only] Settings → Windows Update → Pause updates for a few weeks (it turns back on automatically—not a permanent off).
2. [Policy—Pro/Enterprise] gpedit.msc → Computer Configuration → Administrative Templates → Windows Components → Windows Update → Configure Automatic Updates → Disabled; optionally Remove access to use all Windows Update features → Enabled.
3. [Services—do several] services.msc as admin—stop and set Disabled: Windows Update (wuauserv), Update Orchestrator Service (UsoSvc), Windows Update Medic Service (WaasMedicSvc); optionally Background Intelligent Transfer Service (BITS).
4. [Registry] regedit → HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU (create keys if needed)—DWORD NoAutoUpdate = 1; AUOptions = 1 (notify only, no download).
5. [Scheduled tasks] Task Scheduler → Task Scheduler Library → Microsoft → Windows → WindowsUpdate—disable the update-related tasks.
6. [Delivery Optimization] Settings → Windows Update → Advanced options → Delivery Optimization—turn off downloads from other PCs.
7. Note: disabling only one service may be undone by Medic Service or scheduled tasks; a full shutdown like this app needs policy/registry/services/tasks together.
8. [Restore] Reverse the steps: re-enable tasks and services, remove or revert registry/policy, cancel pause in Windows Update, then check for updates manually.

1. Open Windows Security → Virus & threat protection → Manage settings.
2. Turn off Tamper Protection first (confirm when prompted; other toggles may stay locked until you do).
3. On the same page, turn off every protection toggle: Real-time protection, Cloud-delivered protection, Automatic sample submission, and similar items (names vary by Windows version).
4. Those toggles alone may not stop background scans. For a full shutdown like this app: run services.msc as admin, stop and set to Disabled: Microsoft Defender Antivirus Service (WinDefend), Microsoft Defender Antivirus Network Inspection Service (WdNisSvc), and on Windows 11 Microsoft Defender Core Service.
5. On Pro/Enterprise, you can also use Group Policy: Computer Configuration → Administrative Templates → Windows Components → Microsoft Defender Antivirus → Turn off Microsoft Defender Antivirus → Enabled (Home editions usually skip this).
6. After installing your software, restore in reverse: set services back to Automatic and start them, then re-enable all toggles and Tamper Protection in Windows Security.

1. [Full OneDrive shutdown] Click the cloud icon in the taskbar → Settings → Unlink this PC or sign out, and turn off Start OneDrive when I sign in to Windows.
2. Uninstall: Settings → Apps → Installed apps → Microsoft OneDrive → Uninstall. (Or run %localappdata%\Microsoft\OneDrive\OneDriveSetup.exe /uninstall)
3. Open Task Manager → Startup and make sure Microsoft OneDrive is Disabled.
4. Quit or uninstall alone may not stop Windows Update from bringing it back. For a full shutdown like this app: on Pro/Enterprise, use Group Policy → Computer Configuration → Administrative Templates → Windows Components → OneDrive → Prevent the usage of OneDrive for file storage → Enabled.
5. On Home editions without Group Policy: run regedit as admin, create DWORD DisableFileSyncNG = 1 under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive (create the keys if missing).
6. Restart when done; updates are less likely to reinstall OneDrive or sync in the background.
7. To restore: remove the policy/registry value, reinstall OneDrive, and sign in again.
8. [Network sharing] Settings → Network & internet → Advanced network settings → Advanced sharing settings → turn File and printer sharing and Network discovery on or off for your profile.

1. Add a local account: Settings → Accounts → Other users → Add account → I don’t have this person’s sign-in information → Add a user without a Microsoft account.
2. Remove: Settings → Accounts → Other users → select the account → Remove.
3. Password never expires: open Command Prompt as admin and run: net user USERNAME /expires:never

0x80070035 shared folder error

1. [Shared folders—basics] Same network, Private profile; enable Network discovery and File and printer sharing; allow sharing in Windows Firewall.
2. Workgroup without passwords: under All networks, turn off Password protected sharing—or sign in with the same local username/password on both PCs.
3. For older gear, enable SMB 1.0: Control Panel → Programs → Turn Windows features on or off → SMB 1.0/CIFS File Sharing Support (Win10/11 often still needs the registry steps below).
4. [Registry—both PCs] Run regedit as admin → HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters: add DWORD AllowInsecureGuestAuth = 1 and RequireSecuritySignature = 0.
5. [Registry—host PC] HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters: add DWORD RequireSecuritySignature = 0 and EnableSecuritySignature = 0 if missing.
6. [Registry—interop] HKLM\SYSTEM\CurrentControlSet\Control\Lsa: set LimitBlankPasswordUse to 0 only if you need blank-password shares (less secure). Restart, then test \\COMPUTERNAME\ShareName.
7. Start these services (services.msc): Function Discovery Provider Host, Function Discovery Resource Publication, SSDP Discovery, UPnP Device Host.

SFC / DISM system file repair

1. Open Command Prompt as admin, run sfc /scannow, and wait until the scan finishes (can take a long time).
2. If SFC cannot fix everything, run DISM first: dism /Online /Cleanup-Image /RestoreHealth, then run sfc /scannow again.