My workplace hosts its own Windows update server, so they have total control of Windows updates.