Updates to the Windows operating system contain important patches, however these updates can potentially introduce compatibility issues with third-party software. The following is recommended:
Development and Test environments have Windows Update set to Auto Update or to Download but do NOT install. Testing should be performed in these environments to confirm that there is no impact to your client applications and business processes from the new update.
Production environments should have Windows Update set to Download but do NOT install. Updates should be installed on a regularly scheduled basis, for example, once per week. Having scheduled updates is helpful during error investigation. For major updates, a resource should be designated to verify that changes to the production environment do not cause any unanticipated problems.