I turned off TPM and Secure Boot in bios. Then I disabled automatic updates completely in group policy. Now windows fucks off and never bothers me.