Re: Microsoft claims it's doing this...
Production machines like that should be on a network that's deliberately several, preferably physical, steps removed from any automated update cycle.
Unfortunately, some of us administer systems covered by governmental regulations requiring we stay up-to-date on patches on the production machines. We are behind multiple firewalls, but still need to have the updates. WSUS is your friend here.
Biting the hand that feeds IT
