So I have been using LTSB for a long while, and decided that rather than continue with the 1507 core I'd like to go to 1511 - lots of bug fixes, better driver compatibility, etc.
So I plopped in 1511.3 (last known safe build) and it installed fine (after some UEFI fiddling).
But now I'm at a loss - how on earth do I let it download drivers and security patches but PREVENT it from immediately trying to update to v1709? Very first reboot, it updates.
Of course I could turn off Windows update... but then I'd have to hunt up about 100 drivers on my own, not to mention that there are some pretty big security patches still being released for that OS.
Any ideas? Short of building a domain controller in my bedroom, setting up WSUS/WUB, and declining the update?
I've tried some registry hacks already. They didn't seem to help. There's a policy in GPEDIT.MSC, I'll give that a shot next - it seems to defer "feature updates" for up to 8 months, but I'm not clear if that even counts since it's 5 years later already.
Hoping to find a magic bullet. I know there's some kind of update blocker out there, but can't find the link easily.