Use windows 10 build 1703 (however you will be limited to max 8 cards/rig) and set all the gpedit stuff. Zero updates in 1 year+.
Win 10 1709 can't be stopped from updating, at least in my own dealings with it.