To control whether Windows download and/or installs updates silently or prompts for permission, use this script and set the appropriate NotificationLevel via script. Just make sure you run this code with full Administrator privileges. This code will set Automatic Downloads Notifications to level 3, so Windows will prompt you before it actually installs updates:
# run with full Admin privileges! $updateObj = New-Object -ComObject Microsoft.Update.AutoUpdate # ' 1 = Never Check for Updates # ' 2 = Prompt for Update and Prompt for Installation # ' 3 = Prompt for Update and Prompt for Installation # ' 4 = Install automatically $updateObj.Settings.NotificationLevel = 3 $updateObj.Settings.Save()