There are innumerable reasons why someone would not want Windows to automatically apply any and all updates blindly. Most rational people with a modicum of computer knowledge will opt to set Windows to automatically check for updates, but let them review the list before manually applying them.
The problem is that there are some updates that we may in fact want automatically applied such as Windows Defender/Security Essentials definitions. Most people will usually want to automatically update those.
The Windows Update configuration dialog seems to only let you turn everything on or off.
I don’t suppose that there is any way to configure updates per-item so that some things like malware definitions are automatically updated?
I fear there may be no way to do this for two reasons:
- While the configuration dialog exposes a limited set of options, the registry settings don’t seem to offer any more flexibility.
- Allowing this would require some sort of item-specific identifier to distinguish items which seems not to be the case per this question.
"C:\Program Files\Windows Defender\MpCmdRun.exe" SignaturesUpdateService -UnmanagedUpdate
(as admin)