How to get rid of "Updates are available" message in Windows 10?

Today I got the following message:

Computer was frozen and the only button available was "Get Updates".

I don't need this feature, I need to work, not serve my machine the time she wants.

Currently I did cold reboot and had time to open task manager and process explorer on different screens before the message appears again. Due to the bug in the application, I was able to kill MusNotification.exe process.

Unfortunately, I am unable to restrict system access to musnotification.exe and musnotificationux.exe files, or add them to antivirus blacklist.

How to ban this feature?

Dims

Posted 2015-09-12T12:19:39.733

Reputation: 8 464

see http://superuser.com/questions/946957/stopping-automatic-updates-windows-10?rq=1

– Tetsujin – 2015-09-12T12:54:46.833

Allowing it to download is not "serving your machine", but if it's for work, surely you have Pro and can just defer them? – Sami Kuhmonen – 2015-09-14T06:12:36.450

2I don't like disturbance while thinking. I agree to setup either automatic or manual download / install. I disagree to setup annoying messages. Imagine 100 programs asking for download each day -- when you would work? – Dims – 2015-09-14T10:01:59.153

Do you want to stop the updates or just stop the notifications? – fixer1234 – 2015-09-15T00:34:53.410

1@fixer1234 I agree with notifications, but they should not block my screen – Dims – 2015-09-15T12:48:33.973

Thnx. Can say additionally, that when I was experimenting with killing musnotificationux.exe program, I found, that notification is still appearing, but as normal tray notification: this is a way to notify myself (everybody) prefer. – Dims – 2015-09-16T11:36:44.817

@Tetsujin Present answers to linked question can't help here. gpedit.msc way doesn't disable notifications, and "defer upgrades" doesn't affect security updates (which are likely causing this annoying notification). – janot – 2015-11-15T14:14:01.930

W10 is designed to function this way, you really should revert to 7 if its counterproductive for you. – Linef4ult – 2015-11-24T21:08:04.990

What's the problem with restrict system access to musnotification.exe and musnotificationux.exe files? I've been denying the execute permission of these 2 programs for Everyone. Since I did this, I have never seen this notification any more. But I cannot be sure as I have also messed up a lot with my task schuduler. – jingyu9575 – 2015-11-27T12:36:35.423

Agreed. This is a completely ridiculous behavior. I've been in a conference call sharing my screen for a demo and had this stupid full-screen nag screen pop up interrupting. – xr280xr – 2017-03-31T20:22:34.910

Answers

Unfortunately, I am unable to restrict system access to musnotification.exe and musnotificationux.exe files

From my observations, "restrict system access to musnotification.exe and musnotificationux.exe files" is an effective method of blocking that message, if you have administrator privilege.

Paste these lines to elevated cmd to deny Everyone from executing the two files:

cd /d "%Windir%\System32"
takeown /F MusNotification.exe
icacls MusNotification.exe /deny Everyone:(X)
takeown /F MusNotificationUx.exe
icacls MusNotificationUx.exe /deny Everyone:(X)
rem

I have managed to create a Hyper-V virtual machine that can test this "feature".

Clean install Windows 10 Enterprise LTSB
In gpedit.msc change Windows Update to Notify download
Check for updates, but reboot when it begins to download.
Run usoclient StartScan and wait for the CPU usage to drop to normal. Save a virtual machine checkpoint.

Now, changing the system date to one month later (!) will 100% immediately trigger the "Updates are available" message.

However, if I restore the checkpoint and paste the commands above, changing the date will do nothing special.

Edit:

To undo the changes, run the following commands:

cd /d "%Windir%\System32"
icacls MusNotification.exe /remove:d Everyone
icacls MusNotification.exe /grant Everyone:F
icacls MusNotification.exe /setowner "NT SERVICE\TrustedInstaller"
icacls MusNotification.exe /remove:g Everyone
icacls MusNotificationUx.exe /remove:d Everyone
icacls MusNotificationUx.exe /grant Everyone:F
icacls MusNotificationUx.exe /setowner "NT SERVICE\TrustedInstaller"
icacls MusNotificationUx.exe /remove:g Everyone
rem

This removes the execution restriction first, and temporarily grants Everyone full access to the relevant two files, so that you are able to change the owner of the files back to Windows (TrustedInstaller). After the ownership change, the temporary full access is removed. This is tested on Windows Server 2016 TP4 and does bring back the awful dialog, if I change the system date to 1 month later.

jingyu9575

Posted 2015-09-12T12:19:39.733

Reputation: 926

2When I am testing the undo commands, I notice that 2 new permissions have been set (possibly by Windows Update) on the mentioned files: Deny Everyone from changing permissions and Deny Everyone from taking ownership. They are not effective against Administrators, but I suspect Microsoft is aware of this workaround now, and this is a failed attempt to block it. @mpen see the edit. – jingyu9575 – 2016-01-13T08:03:05.310

4in my case icacls MusNotification.exe /deny Everyone:(X) fails with the error Everyone: No mapping between account names and security IDs was done. Successfully processed 0 files; Failed processing 1 files. Seemed that I had to translate Everyone to Dutch: Iedereen. – Dediqated – 2016-04-19T15:35:56.320

5@Dediqated Can confirm this. German version is: Jeder – Jens – 2016-06-22T08:04:50.333

This is good. But, how do you bypass that Single button blue thing when it already comes up on some machine? – Alex S – 2016-08-29T07:30:45.757

@AlexS (If MS hasn't change it since I last saw this dialog) Click the only button will redirect you to the update settings page, where you can decide to update or just close the window. – jingyu9575 – 2016-09-12T14:28:44.820

@jingyu9575 - I meant what to do where on a machine the above hack/ tweak of settings has not been done. – Alex S – 2016-09-13T12:17:54.557

Oh how fun, after an update this behaviour is back again... – Dediqated – 2016-09-17T11:55:56.003

@AlexS You can mash on the escape button, it'll still popup the Update window but it won't actually get any updates – Steve – 2017-01-15T15:49:48.387

1Hum, why the "rem" at the end? That's just a comment. – Domino – 2017-03-23T02:46:27.173

4@JacqueGoupil If you copy the code altogether and paste it on cmd, all lines except the last are immediately executed, but the last line is not executed without pressing "Enter", because there is no "Enter" after it. I put a rem comment to ensure that all commands above are executed upon paste. – jingyu9575 – 2017-05-09T17:10:59.870

Ah, clever trick. I didn't notice because my text editor is setup to add a newline at the end of files. – Domino – 2017-05-09T19:00:16.200

Does anyone know what the exe is for Windows Server 2012 R2? The file MusNotification.exe isn't on Windows Server 2012. – ScottN – 2017-05-11T15:42:46.820

If you use PowerShell to do this you need to put Everyone:(X) inside quotes. – chew socks – 2018-10-06T18:15:10.280

@ScottN For 64-bit Windows, note that the commands must be executed from a 64-bit command prompt. The reason is that the content of "%Windir%\System32" is different for 32-bit and 64-bit processes. – CrouZ – 2020-02-18T21:55:27.860

The only way i found around this crap is to switch the MusNotificationUx.exe for something less annoying, lets say cmd.exe or somesuch. Sure, a window still opens, but it's not blocking the entire machine.

To do this make sure you change the owner of the file appropriately (away from TrustedInstaller) and set file access accordingly. Then replace the file.

This "feature" is a slap in the face for anyone using Windows 10.

WhiteN01se

Posted 2015-09-12T12:19:39.733

Reputation: 71

A big slap. MSFT, you almost redeemed yourself. – Bruno Brant – 2016-09-26T23:48:08.423

When the window opens, clicking anything will open the update panel and it will set a restart time for the updates to apply. This is fully undesirable.

There is a simpler trick to close the window without touching it:

Hit Ctrl+Shift+Esc, the task anager appears in the background
Hit Ctrl+Tab to navigate to the Details tab
Hit Tab to focus the processes list
Hit M, U, S, N or the keyboard arrows to reach the MusNotificationUx.exe item
- Killing MusNotification.exe does not do anything
Hit Del to end the task
Hit Enter to confirm. The window gets killed.

SandRock

Posted 2015-09-12T12:19:39.733

Reputation: 473

-1

If you want to get out of this lock screen, you should left-click on any part of notification that's not the button and press ESC. Makes the notification disappear for me

Edel Weiss

Posted 2015-09-12T12:19:39.733

Reputation: 9

1This opens the update center here. – allo – 2018-01-29T08:36:49.590