there are (or were) a couple services that i disabled in win10 1709 and that machine has not updated since. pretty sure i didnt do any dns stuff (for instance my hosts file is still stock). but again that version 1709.
that was from a guide i found online a couple years ago. so i have no idea where i got it or if that method (disabling various services only) still works.
I'm still on version 1709 too.
Here is that guide:
1) How to Disable Drivers Update in Windows 10:
Windows key+R > Type gpedit.msc and hit Enter > Navigate to: Computer Configuration > Administrative Templates > Windows Components > Windows Update.
Double-click "Do not include drivers with Windows Update" and set it to
Enabled.
2) How to Disable Windows 10 Update:
Computer Configuration > Administrative Templates > Windows Components > Windows Update.
Double-click "Configure Automatic Updates" and set it to
Disabled.
that sounds about right. the only disadvantage is if you add oddball hardware you need to install the drivers manually. which isnt a big deal on a rig that doesnt see hardware changes for long periods of time.