I spun up an Amazon virtual instance for Windows 2008 R2 Datacenter Edition and when I went into Windows Updates in control panel, automatic updates were turned off. I turned them on and checked for updates and it found security updates, so I'm assuming I took the correct action, but is there something I'm missing and they should be disabled? Is there a reason why they start out disabled?
AWS offers System Patch Manager