HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsUpdate\AU
Add a 32-bit DWORD value called NoAUAsDefaultShutdownOption with a value of 1.
No reboot should be necessary.
You shouldn’t have to restart anything, as the changes will happen immediately.
There’s also a registry file to uninstall the hack.