Hello, I'm thinking that a solution to the OP task is possible with disabling autoupdate via group policy and then using the PSWindowsUpdate PowerShell module to manually install only the needed updates (PSWindowsUpdate looks like a console replacement of the old wuapp). So, Windows Registry Editor Version 5.00[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate][HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]"NoAutoUpdate"=dword:00000001"AUOptions"=dword:00000001and Windows Update PowerShell Module in MS Script Center and some brief guide on using PSWU: https://www.petri.com/manage-windows-updates-with-powershell-module Somewhat tested on my Windows 10 Home N 10586. The policy setting does work in Home edition - at least, Settings - Update&Security - Windows Update - Advanced options show a grayed out "Never check for updates" after applying it. PSWindowsUpdate runs, can get a list of updates and you can specify KB numbers to install like in the example (run get-help Get-WUInstall -examples): PS C:\> $KBList = "KB890830","KB2533552","KB2539636" PS C:\> Get-WUInstall -Type "Software" -KBArticleID $KBList -AcceptAll
