Moira's IT guy' list is pretty good, although I'm not sure if disabling all updates is the way to go. We tried to 'hide' those updates for our clients, but Microsoft has been re-publishing the updates with the same KB number, which effectively un-hides them (meaning they may still get installed).
https://www.grc.com/never10.htm is the quick tool we use to set the registry keys, which has worked for us (so far...).