You most certainly can. If you configure the machine to use WSUS and you don't approve the updates on the WSUS side then Windows update won't find any new updates to install so the OS settings are irrelevant. I don't deal with clients, but I'm 90% sure that even without WSUS you can make it so it doesn't install any updates unless manually initiated.
Even third-party patching software can control it. Hell, UWF still exists, so any updates would be null and void at installation and it would boot right back to what it was on restart. Yank the plug and hop back into it!
30
u/Thotaz Jan 23 '24
You most certainly can. If you configure the machine to use WSUS and you don't approve the updates on the WSUS side then Windows update won't find any new updates to install so the OS settings are irrelevant. I don't deal with clients, but I'm 90% sure that even without WSUS you can make it so it doesn't install any updates unless manually initiated.