We have several Server 2012 installs deployed in our environment and I recently noticed that they are patching on an almost daily basis even though our GPO's for 2008 were set to stop this from happening. I installed the latest GPO admx files for 2012 (we are in a 2008 domain) and tried to reconfigure GPO again to no avail. We use a 3rd party tool for our patch management and as such do not want the machines patching themselves. I tried simply disabling the windows update service on the servers, but something keeps enabling it every night, I'm thinking it is the regular server 2012 daily maintenance task that keeps turning it back on. Research has yielded articles on changing the schedules but I've yet to find anything on how to disable it completely. Has anyone successfully disabled Windows update on server 2012 and if so, how?
Thanks!