Hello,
I have a weird problem. I created a "VIP" group for our important servers.. Everything works finde but I found one problem and I dont know how to solve it.. I used an old Server to test this group and it seems like it automaticly installed Security
Updates and rebooted although my policy should deny it. If servers like our fileserver would reboot randomly it would be fatal..
I also noticed, that only Security Updates were installed.
Here are my policies:

The testserver (first picture the udpates that were installed, then the restart):

