how can i take charge of updates?

[P3nnyw1se]

I've been reading your guides in here. On Service plans, and I used them on my enviroment.

But how do I take charge of updates for Windows 10 enterprise?
When I deploy a Vanilla Windows 10 to a device, it starts updating straight away, all kinds of updates I haven't deployed. And it does so straight from Microsoft.

I've been reading about setting the gpos 'defer updates' etc.
But I don't want to withhold the devices from downloading online. I want to deny it.

I want to take charge of that myself. I want my SCCM and WSUS to deploy monthly updates just like I'm doing with Windows 8.1.
But I can't seem to stop my Windows 10 from updating themselves.

Am I suppose to set the 'intranet Microsoft update service location' ?

I'm confused because with win 8.1 I didn't have to do anything. the devices themselves
knew through the SCCM client that SCCM was handling the updates.
-----------------------------------------------

I have now set the GPO 'configure Automatic updates' to disabled.

[anyweb]

have you configured a SUP ? or how are you deploying these Windows 10 systems and how do you intend to update them ?