Interesting response. I have a better solution. It's ridiculous to have to fiddle with settings as you describe. Microsoft has been irresponsible and making irresponsible update decisions for several years. There has been insufficient oversight and testing.
I am in the process of transitioning to Apple OSX hardware which does not have this problem and is more secure in the bargain.