Check up on your Windows Defender Firewall protection.
In Windows 8 and 10, allowing the Windows Update service through the firewall is not enough. We are using up to some part QoS on out routers but it not working all the time.
We have a need to prevent windows update traffic to flow thru our network on certain dates.