Forum Discussion
Forced Upgrades on domain joined machines
https://www.captiongenerator.com/949572/Windows-Update-Hell
Is the upgrade assistant you are seeing the modern app one?(which if you are like me and have only Windows 10 pro, you can't control consumer apps installed from the store without upgrading to Enterprise)
https://blogs.technet.microsoft.com/wsus/2017/08/04/improving-dual-scan-on-1607/ You can block the ability for workstations to download from WU
Other admins have been a bit more adventuresome in changing permissions on the upgrade folder: https://community.spiceworks.com/topic/2077036-how-to-block-1709-download-from-windows-update
I already have the policies in place that are supposed to prevent this from happening.
I even have the policy 'Do not connect to any Windows Update Internet Locations' yet I still have the Update Assistant installing itself constantly onto random machines (not all) which are 1511 or 1607.
It is the one that is the store app? As that wouldn't come through WU but through store.
BTW 1607 does drop out of support after April unless you are running Enterprise or Education, do you have those versions?