Does Windows 10 Enterprise Have The Ability To Turn Off Updates Permanently?

It does, through the Group Policy.

Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates

Set that policy to disabled, and it should no longer automatically check for and install any updates.

 

i think better to step down wu services to manual state ie crypto, bits & wu .

 

No,
But it works fine in Enterprise, Education, IotEnterprise editions.

Open group policy,
Computer Configuration > Administrative Templates > Windows Components > Windows Update > Configure Automatic Updates

Make sure to not change the edition to lower editions after the policy is applied.

You can change the edition, by just entering the desired edition key and restart.

 

That policy doesn't exist in my Enterprise 2019 LTSC install. Now you can delay updates for up to 30 days from a specific date you set, only if you haven't turned telemetry down to minimum.

Someone on another site said you can stop it fetching and installing things by setting the network to "metered". Then it tells you updates are available but doesn't install them. I'm going to guess making it metered is going to have bad side effects to make it undesirable though, just knowing how MS operates.

WSUS emulator, anyone?

 

Yep. https://forums.mydigitallife.net/th...e-implementation-of-wsus-server-in-php.80853/

 

Check again, it should be there, share the screenshot if it doesn't exist.
Alternatively, you can pause updates for a long time using this trick, or use this tool to block updates. There are many working methods, you need to test them yourself and make a decision about what's best for you.

 

Oops you're right. It's there. I went down one more level into "Windows Update for Business" by mistake. Thanks.

 

the option is also there on Enterprise LTSB 2016 as well