kiwiharry: . I had my updates setting on Notify only and do not download updates,
.
MS has some history of auto installing updates , when set to notify only, simply because MS thought they were important.
Set to "Never check for updates", as past experience has shown MS will push some through regardless other wise
I see one of the links about this issue blames IT for not having centrally/server managed Winupdates.
Well thats all very nice for large companies with in staff IT or contracted REGULAR IT support/checks.
Many companies dont work like that & ONLY call IT when something is broken. In these cases server managed Winupdates isnt that good an idea as there
is no-one to keep an eye on it (Ive seen sites like this with no updates for many many many months due to WSUS issues )


