Windows Updates can be disabled. I usually disable the Windows Update service, then I disable any scheduled task for Windows Update and Update Orchestrator, and finally I run a utility such as O&O Windows shutup to disable anything under Windows Update. This usually does the trick for several months, until a major upgrade (new build) is released. I can then either repeat the above procedure or install the new version and then do it again to cut minor updates and driver updates.