Note: this only applies to security updates. Windows Update divides updates into three categories: Critical, Recommended, and Optional. Critical and Recommended updates are installed automatically by default. Many enterprises choose to control Recommended updates manually at the group policy level; some even control critical updates with group policy. Major revisions of Internet Explorer have traditionally been delivered as optional updates.
