So I have a very specific use case and need to use my old backup win10 laptop for a test (only windows or mac allowed, no linux). I never connect this laptop to the internet because I need it to stay on 10 to work with specific software/hardware I have on it. But this test requires internet. How can I block the windows update servers on my VLAN? I know the second I connect this thing microslop will corrupt it to force me to update.
Use Group Policy to disable updates.
If you have a Home version, disable the Windows Update service and the Windows Update Health service which prevents the Windows Update Service from being disabled.
Hkey_local_machine\system\CurrentControlSet\Services\WaaSMedicSvc
Change the Start value to 4 (disabled).
Now you can disable the Windows Update Service.
This is a Microsoft-provided solution to this question on their forums.