Here is how to block Windows Update:
For the service:
Add
%systemroot%\system32\wuaueng.dll
To the Service Options > Specify service MODULES that should have no privileges.
For interactive/user:
Add
%systemroot%\system32\wuapp.exe
%systemroot%\system32\wuault.exe
To the Interactive Program Options > Specify Interactive Programs that should not start