Run the script essentially once a year or so when major updates come along.

I’ve set it up in the task sheduler as a “on boot-up” task. Have never bothered with it through multiple updates.