“On systems with Secure Launch enabled, attempts to shut down, restart, or hibernate after applying the January patches may fail to complete.”
“On systems with Secure Launch enabled, attempts to shut down, restart, or hibernate after applying the January patches may fail to complete.”
You can also set a group policy to allow no updates at all except when you approve and download them manually.
Ridiculous that you need the group policy manager for the basic setting of “don’t put shit on my PC without asking,” but here we are.
Is gpedit even included in retail/OEM windows licenses these days? The vast majority of users wouldn’t know how to do that anyway, hell it’s a swamp even for power users.