Re: WSUS policy and Auto Restart
If WSUS updates apply without anyone logged in, and at least one update requires a restart, then the computer restarts. That’s down to the nature o fthe updates themselves, and not all updates will requrie a restart. If you don’t want a restart to take place because you’re updating a server, then don’t force the updates to apply automatically to the servers. Do those manually. Allow the updates to download when they’re approved, but do the installs interactively. When the restart message pops up, click ‘restart later’, then schedule a restart task for a period when the outage will have minimal impact. The server will have to be restarted at some point for the applied updates to begin functioning, so it can’t be helped, but at least you can minimize the impact to users.
For user workstations, apply the updates when no one’s logged on (middle of the night?) and let them restart. That forces compliance in your environment, and doesn’t kick users off while they’re working.