go to group policy and enable
No auto-restart with logged on users for scheduled automatic updates installations

in admin template / windows components / windows update