For Enterprise/Server you set

[disable] Configure Automatic Updates

or if you really care

[enable] Do not connect to any Windows Update Internet locations