Keep Comodo rules and System rules apart

The default rules for file groups contain one Comodo exe in Updater apps and another one in System apps.
Please don’t mix System/Updater rules with Comodo rules, even if both need identical privileges.
Not everyone trusts MS unconditionally (I for one don’t).
The only trusted vendor in my rules is Comodo.
Also, Windows update is strictly blocked here – I’ll update when I decide to. To achieve this, I had to move the two executables mentioned above to the rules for Comodo files.


Disable the service via Control Panel and also services.msc from starting up. You can still access the M$ site to update (via their website), this will only stop the Automatic Update from ever starting up.

Google is your friend.