How to Block windows update in mikrotik

i dont have the smartest people in the world (what else is new) and the problem is they complain about slow internet when infact windows update is doing its thing in the background and slowing the connection thats already not so fast.

/ip firewall layer7-protocol
add name="windows update " regexp="^.+(http://windowsupdate.microsoft.com|http://*.windowsupdate.microsoft.\
    com|https://*.windowsupdate.microsoft.com|http://*.update.microsoft.com|https://*.update.microsoft.com|\
    http://*.windowsupdate.com|http://download.windowsupdate.com|http://download.microsoft.com|http://*.dow\
    nload.windowsupdate.com).*\$"



/ip firewall filter
add action=drop chain=forward comment="windows update Drop" layer7-protocol="windows update " src-address=\
    192.168.128.0/24
add action=drop chain=input dst-port=21-23 protocol=tcp