If you don't want to suddenly lose control of your mining rig like these guys you have to disable automatic Windows Update service right after installation of the OS. You can do it by running the script BlockWindowsUpdate.bat or by following this GUI oriented how-to.
As stated on this page https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings
In Windows 10, any Group Policy user configuration settings for Windows Update were deprecated and are no longer supported on this platform.
So this GUI oriented how-to is here just for history. Please use BlockWindowsUpdate.bat script mentioned above or follow this excellent guide.
STEP 1. Open Edit group policy control panel aka gpedit.msc
1. Type gpedit in the search box located at taskbar (or call one by pressing WIN LOGO + S)
2. Click the search item Edit group policy.
3. Click the Open action item.
attachment
STEP 2. Navigate to Windows Update settings
4. Unfold the Computer Configuration item.
5. Unfold the Administrative Templates item.
6. Unfold the Windows Components item.
7. Scroll down the configuration tree.
attachment
STEP 3. Open Configure Automatic Updates dialog
8. Unfold the Windows Update item.
9. Double click the Configure Automatic Updates item.
attachment
STEP 4. Apply configuration settings
10. Click the Enabled radio button.
11. Click the pull-down menu and select the 5 - Allow local admin to choose settings item.
12. Click the OK button to close the dialog.
attachment
STEP 5. Open IP address configuration dialog
13. Double click the Specify intranet Microsoft update service location item.
attachment
STEP 6. Specify a fake IP address for the update server
14. Click the Enabled radio button.
15. Enter the value http://127.0.0.2 in each edit box
16. Click the Download files with no url in the metadata… checkbox
17. Click the OK button to close the dialog.
attachment
STEP 7. Open Windows Update alternate locations dialog
18. Double click the Do not connect to any Windows Update Internet locations item.
attachment
STEP 8. Disable Internet connections for Windows Update
19. Click the Enabled radio button.
20. Click the OK button to close the dialog.
attachment
STEP 9. Close Policy Editor window
21. Finally, just close the window
attachment
STEP 10. Open Services control panel
22. Type services in the search box located at taskbar (or call one by pressing WIN LOGO + S)
23. Click the search item Services.
24. Click the “Run as administrator” action item.
attachment
STEP 11. Disable Windows Updated related sevices
25. Double click the column divider next to the Name column.
26. Click two times the header of the Status column to get running service on top of the list.
27. Scroll down the list
28. Locate Windows Update service and double click it for displaying service configuration dialog
attachment
STEP 12. Update service settings
29. Select Disabled for the Startup type field.
30. Click the Stop button if it's enabled (not grayed out).
31. Click the OK button to close the dialog.
32. Repeat steps 28-32 for services Update Orchestrator Service and Windows Update Medic Service
attachment