don't disable windows update service, just set to manual updates