WSUS and Group Policy

I wonder if you can help.

How do I stop Windows Updates from pushing out in our domain environment.

We are having a lot of problems with a third party web application and im adamant its these so called "Cumulative Security Updates for IE"

All I get from the development team is "it work on our machines" and im not getting anywhere.

The answer is Firefox as it works fine but I'm not ready to throw that 100 users quite yet.

Anyway, so our AD has computers OU when they initially join and we drag to a X64 or X86 OU depending on architecture. WSUS seems to push update when joined to this OU but I cant find where the setting is for this. Any ideas where I can look?

Thanks, is this where I do that? (I unticked it already - pre empting)

Pictures attached.