easy way is disable Cortana, you can also disable Edge. No updates. disable OS upgrades
1.
To disable Cortana in windows 10
Press Win + R keyboard accelerator to open Run dialog box.
Type GPedit.msc and hit Enter or OK to open Local Group Policy Editor. Navigate to Local Computer Policy ->
Computer Configuration -> Administrative Templates -> Windows Components -> Search.
In the right pane, double click on policy named Allow Cortana.
Select the Disabled radio button.
Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search. If you don’t see a “Windows Search†folder, right click the Windows folder and create a new key named “Windows Searchâ€. Then right-click this newly created folder in the left pane and select
New > DWORD (32-bit) Value. Name the value AllowCortana. Double-click it and set the value to 0
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f
2.
Hold down the Ctrl and Alt keys and tap the delete key, then click on Task Manager.
If it says "More details" at the bottom of the Task Manager window, click on it to show more details.
Scroll down the list and look for "Microsoft Edge". If you find it in the list, right click on it and select "End task".
Now, open File Explorer and find the folder "C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe" and rename that folder to anything you wish. (I normally just append some text to it like "_remove" so I can easily re-enable Edge in the future if I desire.)
Edge should now be "disabled".
Keep in mind that Microsoft may try to re-enable Edge during a future update...
Go to: C:\Windows\SystemApps\
Open folder Microsoft.MicrosoftEdge_8wekyb3d8bbwe
Right click on MicrosoftEdge file then Properties / Security / Advanced / Click Change (next to owner) and change to your username, then click OK
Then Click Edit, then add your username and give full permissions
Rename MicrosoftEdge file to MicrosoftEdge_remove or a name of your choice
Repeat all above steps for file MicrosoftEdgeCP also
Done! Edge will not run!
3.
Windows users have two options to block the upgrade to Windows 10. First, by using the Group Policy (only available on Pro, Business and Enterprise editions).
Tap on the Windows-key, type gpedit.msc and hit enter.
Navigate to the following location: Computer Configuration > Policies > Administrative Templates > Windows Components > Windows Update
Double-click on Turn off the upgrade to the latest version of Windows through Windows Update.
Enable the policy.
To undo the change, set the policy to disabled.
If you don't have access to the Group Policy Editor, or prefer using the Registry, do the following:
Tap on the Windows-key, type regedit and hit enter.
Confirm the UAC prompt if it is displayed.
Navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
Check if the preference DisableOSUpgrade exists.
If not, right-click on WindowsUpdate and select New > Dword (32-bit) Value.
Name it DisableOSUpgrade.
Double-click the preference.
Set its value to 1.
To undo the change, delete the key or set it to 0.
To hide the Get Windows 10 app
Microsoft reveals in a Knowledgebase article how to hide the Get Windows 10 app on older versions of Windows.
The company notes that the app is not displayed on certain systems automatically, and that users don't need to do anything in this case.
Computer joined a domain.
Computer is managed through MDM.
The computer runs: Any Enterprise version of Windows, any Windows RT version, any Windows Embedded version.
A Registry key is provided that system administrators and users can set to block the Get Windows 10 application.
Open the Registry Editor again.
Navigate to the key: HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\OSUpgrade
Right-click on OSUpgrade and select new > Dword (32-bit) Value.
Name it ReservationsAllowed.
Double-click the preference and set its value to 0.
Delete the key if you want to undo the change.
It makes sense to implement these preferences on devices running earlier versions of Windows if those devices should not be upgraded to Windows 10. Obviously, this should not be the only options and a program like GWX Control Panel or manually verifying all updates before they are installed are proper options to make sure nothing slips by.