For dstrauss -- try OOShutUp. I have two configuration files for that. One, the one normally in use, does block ALL updates. You can't even manually download them. When I do want to do an update I swap in the other file, go to microsoft updates and proceed. I also use Microsoft's Hide Updates Tool so that unwanted ones don't auto install while I'm allowing updates.