Microsoft has shared a quick reference guide for appropriate Group Policy settings in the case of Windows Updates. While the firm recommends the default in general, these are for specific use cases.
Group policy RSS
Microsoft has released Build 22563 today to Insiders flighting the Windows 11 Dev channel. It brings the recently leaked Tablet-mode Taskbar, some group policy changes for Windows Update, and more.
An exploit called "PrintNightmare" is being investigated by Microsoft. It potentially affects all versions of Windows. U.S. CISA has marked it as "critical" as it can lead to remote code execution.
Microsoft has added a new Group Policy to Windows 10 versions 1809 and newer that allows IT admins to disable all 'safeguard holds' that prevent feature update installs through Windows Update.