Re: If you start with the premise...
Marking your external network interface as a metered connection kills most unexpected updates. Now disableable from network settings, probably the only useful thing in recent updates. Then group policies need hacking.
Biting the hand that feeds IT
