The only time auto updates should be disabled is on machines with an uptime requirement, which should have regularly scheduled maintenance which includes updating their software. And of course any critical security updates should be installed asap even if it’s outside the normal maintenance window.

[–] 01189998819991197253@infosec.pub 3 points 10 months ago

I agree 100%. I don't like autoreboots, but fully understand why they exist. People, in general, just stopped rebooting regularly. I have disabled autoreboot for a select few PCs in our environment, but I follow up with them within one week after I get notified that their computer updated and they haven't rebooted. Most people in this group reboot within a day or two. I usually have to remind only one person.