Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate]
"DisableWindowsUpdateAccess"=dword:00000001
Good idea in theory, but unfortunately that didn't help.
My PC didn't have the bolded part created, so I made the rest all the way out as Keys and then a DWORD on the end.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\LocalUser\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate\DisableWindowsUpdateAccess
I have the long list of GP registry entries on my site, http://j79zlr.com/gphome.php
http://j79zlr.com/gphome.php#WindowsUpdate
This list is pre SP2 though, I believe there are a few things that need to be added.
whats wrong with disabling the two services and locking users out of services.msc?
Administrators could run services.msc and enable temporarily.