Assuming you mean software updates, then prior to 2019 R1, you could turn off the Help | Automatic Check for updates option (if you run as admin) to avoid automatic updates being made available.

From 2019 R1 and onwards, the updating is done by a separate Universal Updater utility. There is an admin setting in that tool to only report new updates, but not allow them to be installed.

Do these cover this request?