Updating group policy immediately
In Windows 10 1607 (Anniversary Update), the Windows Update setting no longer offers a drop down menu to disable updates.
However, you can still turn off Automatic Updates with Group Policy.
For group policy wonks, this is no doubt old hat, but for the rest of us: 1.
Find a machine with the latest security update installed.
However, the ability to centrally and locally configure Active hours, as a way of preventing unwanted restarts, is advantageous.
The Restart options can only be configured when a restart is scheduled.
In this case, the user will receive a corresponding systray message and the restart time can then be rescheduled.
I finally found the update applied to a Windows 7 virtual machine that I allow to update automatically. Copy these two files from that machine to a temporary location: C:\Windows\Policy Definitions\Cred (dated 2/9/2018) C:\Windows\Policy Definitions\en-US\Cred (dated 2/10/2018; adjust language folder to your local language) 3.
On a domain controller, in Windows Explorer, navigate to C:\Windows\SYSVOL\sysvol\Policies\Policy Definitions a.