Best Article that will help you achieve what you want, it's one GPO to deploy.Our SCCM managed clients are reaching out to microsoft online for updates and upgrades
View attachment 2052
I cant figure out what setting has changed to cuase this behaviour
How do i ensure that DefaultAUService is SCCM SUP managed?