Brink, will this prevent the covert updates to Defender known as "critical updates"? I had set defender up as you showed with the exception of "Uncheck the Use this program box". Don't know how I missed it but I did. Over the past 4 weeks, Defender update KB915597 has messed up my machine 8 times resulting in me doing complete clean installs, which I am getting really good at. I am not real happy with MS Updates. In addition to the Defender update, NetFramework KB958488 also screwed up my machine twice. Just finished a complete redo last night only to find the Defender update had covertly installed around noon yesterday. Waiting to see the issues began. Got to be some way to totally stop the updates as I am totally paranoid.