The easiest solution is to tell it you're on a restricted data account..
That way it never attempts to download updates.
Tbh, it's not necessarily good practice to have production computers connected to the Internet, no Internet.. No problems like viruses, updates, etc.. Just share the devices on the network.
Have another one for Internet stuff, then access downloads from the internal network. That way you keep the important stuff flowing (money) - also works great when drivers aren't available in newer versions.