[TChad]

Unfortunately, it looks like unless you actually turn Updates completely off, Microsoft will still force some auto updates on you.

The method I described above should work, because the user will be sitting in front of the computer when he clicks "Check for updates," and he can see the newly-arrived list of updates before they are installed. If he can see the list of uninstalled updates, he can hide particular updates.

[CedarDave]

What Microsoft seems to say in the privacy notice is that some updates will be forced on you if you so much as click to just show the available updates:

If you turn on the Update Services, regardless of which setting you have chosen, required updates to some components of the service will be downloaded and installed automatically without further notice to you.