The Local Group Policy Editor available on Windows 10 Pro includes policies to permanently disable automatic updates or change the Windows Update settings to decide when patches should be installed on the computer.

Disable updates

To disable automatic updates on Windows 10 permanently, use these steps:

1. Open Start.
2. Search for gpedit.msc and click the top result to launch the Local Group Policy Editor.
3. Navigate to the following path:

   Computer Configuration > Administrative Templates > Windows Components > Windows Update

4. Double-click the Configure Automatic Updates policy on the right side.

   Source: Windows Central

5. Check the Disabled option to turn off automatic updates permanently on Windows 10.

   Source: Windows Central

6. Click the Apply button.
7. Click the OK button.

After you complete the steps, the system will stop downloading updates automatically. However, the ability to check for updates manually will continue to be available on Settings > Update & Security > Windows Update, and clicking the Check for updates button to download the most recent patches.

If you want to enable automatic updates on the device again, you can use the exact instructions outlined above, but on step No. 5, make sure to select the Not Configured option.