Oui, via GPO :
Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings
Activez « Turn off access to all Windows Update features ».
Ou via le registre :
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
"DoNotConnectToWindowsUpdateInternetLocations"=dword:00000001