Clients who subscribe to our Managed Endpoint plans may notice that the 'Check for Updates' button is greyed out or disabled in the Windows Update dialogue.
This is intentional as it ensures that Windows itself does not try to automatically install updates - our patch management system automatically downloads and applies patches on your behalf, while vetting them beforehand.
Using this convention allows us to automatically defer non-critical patches for 2 weeks, meaning that they're much less likely to be problematic (as bugs will be fixed) when they are installed.
We do allow clients to reverse this if they desire, via a script that our Support Team can provide to you. However, please note that we cannot assist with issues arising from unstable patches installed by the end-user.