Forced Upgrades on domain joined machines

I am absolutely defeated by Windows Update, after spending months trying to get it working how I want it, I now have the Upgrade Assistant installing itself onto PC's all over my network. I have WSUS...