Best practices to use DesktopCentral pathcing instead of WSUS/Windows Update

I am working on a new Windows 10 rollout and would like to have Desktop Central control ALL windows updates for all workstations.

I have not (I do not wish to) set up WSUS - but in a tight test with two Windows 10 installs (one with 1607 ENT and the other using 1607 LTSB) I am finding that while Desktop Central seems to have patched these two just fine last week with what looks like the latest cumulative updates - I noticed this morning on my LTSB install that two patches "suddenly" showed up when I clicked on WIndows Update.

These the two "updates" are waiting right now...

Last week I deployed (via Desktop Central) the supplied DisableWU regfile to this workstation:

Software\Policies\Microsoft\Windows\WindowsUpdate\AU

REG_DW

NoAutoUpdate = "1"

I was hoping that this tweak was enough to stop it from reaching Windows Update - but seems that is not the case.

So my frustrations are several fold...

1. Why are these two updates suddenly showing up after I applied the regfile above?

2. More importantly - why are these two updates NOT showing within Desktop Central to be applied? There is no evidence of these even being downloaded?

3. What do I have to do to completely cut off all workstations from ever accessing Windows Update so I can use Desktop Central to manage all patching?

Appreciate any ideas from others who want to standardize on a single Windows patch management process.

Cheers,