It has built-in support to block Windows Services/Apps/Updates without user interaction.