UsoClient.exe popup
If you too are noticing this on your laptop, here are a few things you may want to know. USO stands for Update Session Orchestrator. The usoclient.exe file or the Windows 10 Update Orchestrator, is located in the System32 folder. If you open this folder location and right-click on it and select Properties, you will see that it a Microsoft Windows Operating System process 0f size 19.5 KB. usoclient.exe and its related processes & files like usocoreworker.exe, usoapi.dll, usocoreps.dll and usosvc.dll are used by Windows 10 to check for, download and install Windows Updates, They do the job that wuauclt.exe once did. VirusTotal & Jotti scans find this file C:\Windows\System32\usoclient.exe to be completely clean. If you find a file with this name in any other folder, it could well be a virus and you may want to run your anti-virus software scan, to be sure. If you open Task Scheduler and check the scheduled tasks at Microsoft > Windows > UpdateOrchestrator, you will find mention of this process. The scheduled tasks associated with it, It notifies you of these events using a process called MusNotification.exe. The Triggers for this task to run could be One Time, At system startup, Custom Trigger or On an event – and it performs a scheduled Windows Update scan.
UsoClient commands
The following are the command you can run in an elevated command prompt:
How to disable UsoClient.exe
If you wish, you can disable automatic restart for Automatic Updates by opening your Group Policy Editor and navigating to the following setting: Here in the right pane look for, double-click on, and Enable the No auto restart with logged on users for scheduled automatic updates installations setting.
If you prefer using the Windows Registry, navigate to the following key: Here create a new DWORD 32-Bit value, name it NoAutoRebootWithLoggedOnUsers and give it a value 1 to disable auto reboot. In any case, seeing a CMD windows popup on every boot is not a good user experience, and I really have no idea why it should be happening on one of my Windows 10 laptops and not the other 3-4 computers. Those of you who may still be concerned may want to check your firewall and router logs for the connection requests it makes. Feel free to add any additional information or feedback you may have about this.
