How does the Microsoft-signed executable software work?
A. It is a small program that accepts one of two command line options (/B for block and /U for unblock)) and creates or removes the registry key that controls the ability to deliver a Service Pack to a Microsoft Operating system via Windows Update (WU)/Microsoft Update (MU). It is signed by Microsoft, so the operating system knows the executable is provided by Microsoft and is therefore trustworthy.