@echo off
setlocal EnableExtensions EnableDelayedExpansion
title Pooltronics - Controle de Update de Drivers (Win 10/11)

rem ============================================================
rem  POOLTRONICS - Bloqueio de atualizacao de drivers via WU
rem  Funciona em Windows 10 e 11 (Home e Pro).
rem  Usa chaves de POLICY que sobrevivem a feature update.
rem ============================================================

rem ==== Auto-elevacao (UAC) ====
net session >nul 2>&1
if %errorlevel% neq 0 (
    echo Solicitando privilegios de administrador...
    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs" >nul 2>&1
    exit /b
)

:MENU
cls
echo ============================================================
echo   POOLTRONICS - Controle de Update de Drivers (Win 10/11)
echo ============================================================
echo.
echo   Impede o Windows Update de ATUALIZAR drivers (video, wifi,
echo   etc). A instalacao de driver de dispositivo NOVO continua
echo   funcionando.
echo.
echo   [1] NIVEL 1 - Bloqueio CIRURGICO   (RECOMENDADO)
echo        Bloqueia update de driver via Windows Update.
echo        Dispositivo novo instala normal (inclui WU como fonte
echo        na primeira instalacao, se precisar).
echo.
echo   [2] NIVEL 2 - Bloqueio MAXIMO       (paranoia)
echo        Tudo do Nivel 1 + impede o WU de ser fonte de driver.
echo        Atencao: hardware novo SEM driver nativo no Windows
echo        precisara de instalacao manual do driver.
echo.
echo   [3] RESTAURAR padrao do Windows  (desfaz tudo)
echo.
echo   [4] VERIFICAR status atual
echo.
echo   [0] Sair
echo.
set /p "OPT=Escolha uma opcao: "

if "%OPT%"=="1" goto LVL1
if "%OPT%"=="2" goto LVL2
if "%OPT%"=="3" goto RESTORE
if "%OPT%"=="4" goto STATUS
if "%OPT%"=="0" exit /b
goto MENU

:LVL1
cls
echo Aplicando NIVEL 1 (bloqueio cirurgico)...
echo.
call :APPLY_CORE
echo.
echo OK. Drivers nao serao mais ATUALIZADOS pelo Windows Update.
echo Eles podem ate aparecer em "Atualizacoes opcionais", mas NAO
echo serao instalados sozinhos - so se voce escolher manualmente.
echo.
echo  ^>^>^>  REINICIE o PC para aplicar de vez.  ^<^<^<
echo.
pause
goto MENU

:LVL2
cls
echo Aplicando NIVEL 2 (bloqueio maximo)...
echo.
call :APPLY_CORE
call :APPLY_SEARCH
echo.
echo OK. Update de driver bloqueado E o Windows Update nao sera
echo mais usado como fonte de driver.
echo Lembrete: dispositivo novo sem driver nativo vai precisar de
echo instalacao manual (site do fabricante, ou Gerenciador de
echo Dispositivos ^> Atualizar driver ^> Procurar no computador).
echo.
echo  ^>^>^>  REINICIE o PC para aplicar de vez.  ^<^<^<
echo.
pause
goto MENU

:RESTORE
cls
echo Restaurando configuracao padrao do Windows...
echo.
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ExcludeWUDriversInQualityUpdate /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\PolicyManager\default\Update" /v ExcludeWUDriversInQualityUpdate /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Update" /v ExcludeWUDriversInQualityUpdate /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState" /v ExcludeWUDrivers /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v DontSearchWindowsUpdate /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v DriverUpdateWizardWuSearchEnabled /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v SearchOrderConfig /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v DontSearchWindowsUpdate /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v DriverUpdateWizardWuSearchEnabled /f >nul 2>&1
rem volta SearchOrderConfig ao padrao do Windows (1 = busca automatica)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 1 /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /f >nul 2>&1
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" /v PreventDeviceMetadataFromNetwork /f >nul 2>&1
echo OK. Tudo voltou ao padrao do Windows.
echo.
echo  ^>^>^>  REINICIE o PC para aplicar de vez.  ^<^<^<
echo.
pause
goto MENU

:STATUS
cls
echo ============================================================
echo   STATUS ATUAL
echo ============================================================
echo.
echo --- Bloqueio de UPDATE de driver (Nivel 1) ---
call :CHK "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" "ExcludeWUDriversInQualityUpdate" "GPO WindowsUpdate     "
call :CHK "HKLM\SOFTWARE\Microsoft\PolicyManager\default\Update" "ExcludeWUDriversInQualityUpdate" "PolicyManager default "
call :CHK "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Update" "ExcludeWUDriversInQualityUpdate" "PolicyManager device  "
call :CHK "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState" "ExcludeWUDrivers" "UpdatePolicy state    "
echo.
echo --- Bloqueio de WU como FONTE de driver (Nivel 2) ---
call :CHK "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" "DontSearchWindowsUpdate" "Policy DontSearchWU   "
call :CHK "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" "SearchOrderConfig" "Policy SearchOrderCfg  "
call :CHK "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" "SearchOrderConfig" "Sistema SearchOrderCfg "
call :CHK "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" "PreventDeviceMetadataFromNetwork" "PreventMetadata       "
echo.
echo  Legenda: 0x1 = ligado.  SearchOrderConfig 0x0 = nao usa WU.
echo  "ausente" = no padrao de fabrica do Windows.
echo.
pause
goto MENU

rem ===================== SUBROTINAS =====================

:APPLY_CORE
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\default\Update" /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Update" /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState" /v ExcludeWUDrivers /t REG_DWORD /d 1 /f >nul
echo  - ExcludeWUDriversInQualityUpdate definido (4 fontes/GPO).
goto :eof

:APPLY_SEARCH
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v DontSearchWindowsUpdate /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v DriverUpdateWizardWuSearchEnabled /t REG_DWORD /d 0 /f >nul
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 0 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v DontSearchWindowsUpdate /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v DriverUpdateWizardWuSearchEnabled /t REG_DWORD /d 0 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig /t REG_DWORD /d 0 /f >nul
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f >nul
echo  - DontSearchWindowsUpdate + SearchOrderConfig + metadata definidos.
goto :eof

:CHK
set "RES=ausente (padrao)"
for /f "tokens=3" %%A in ('reg query "%~1" /v "%~2" 2^>nul ^| findstr /i /c:"%~2"') do set "RES=DEFINIDO  ->  %%A"
echo    [%~3] !RES!
goto :eof