Azure agents are configured to automatically enable Windows Updates. If you want to disable this, check this box.