The only time I use Windows is on our AWS instance. On there, we run WSUS and do automatic updates to a subset, and upon good update, approve the rest of the ma

The only time I use Windows is on our AWS instance. On there, we run WSUS and do automatic updates to a subset, and upon good update, approve the rest of the machines. I'd never trust MS's own idea for "updates".