Right; but you're solving a symptom, not the problem. It sounds like what you really need is some sort of approval process, or at the very least a checklist, to ensure these machines are configured in the way they should be. Or, at the very least, that the teams involved understand the implications of a computer sitting in a base in the middle of nowhere with auto-updates turned on.

The point I was trying to make is that the problem you're seeing isn't specific to Windows 10; it could have easily happened on Windows 7 or 8 or 8.1 instead.