nathan: The WU setting that allows all users (ie standard users) to install updates from WU does not allow a standard user to install Windows 10
If you want to stop a local admin from installing Windows 10 thru WU set this key
Subkey: HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
DWORD value: DisableOSUpgrade = 1
And then watch MS over write it .... See articles above.
But that's missing the point- MS SHOULDNT be doing this in the first place and forcing IT to play silly beggers trying to stop them is a waste of resource, time and money.
Whose Pc is it? theirs or ours? EXACTLY.