Restart a MS Server 2008, without it installing updates

Try this:

Reboot from the server 2008 install disc and choose the repair option and command prompt.

navigate to c:\windows\winsxs, and rename pending.xml to pending.old

Reboot

AFAIK, you have two way of doing that: - Install a WSUS Server and don't push any updates to the machine group your TS server is member of (create one for this). - Disable automatic updates altogether and, when needed, do a manual update.

There is no way to prevent an admin user from changing these parameters, but at least, it won't be automatic. You might consider finding a way to run your CMS software without admin rights, though. It's usually possible to do so by changing permissions on files, registry keys and database objects (although, obviously, is the application checks if it holds admin rights, you're not going to go very far).

Another option would be to use virtual desktops but that's usually waaaay more expensive.