The Windows update in question was the one that patched Spectre/Meltdown, if you would like to have your machine patched (except the one mentioned above) without disabling windows update, you need to following regkeys to disable the update crippling this model,
I have had to push this out in our organization and we are sitting at about 50+ models of this laptop now. Its upsetting but i would rather that than the users have a paperweight
Two Keys:
Under Regkey Location
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
You will need to create two subkeys here, and they are:
1:
DWORD - Name is "FeatureSettingsOverride" and value is "3"
2:
DWORD - Name is "FeatureSettingsOverrideMask" and value is "3"
after you reboot, this should fix the terrible uselessness of this model on 10.