Once the Vault Server has been installed, configured and passed any User Acceptance Tests, turn Automatic Windows Updates off. This prevents any unplanned changes being made to the system. Microsoft and other software vendors regularly release security updates. Applying Windows\Microsoft updates should only be performed once IT has validated that the updates will not have a negative impact on the Vault Servers function, performance or availability. For more detailed advice, Microsoft have published a best practice strategy for applying updates to production environments here.