I think what you are after is found in group policy
computer configuration > administrative templates > windows update>
enable "Do not display 'Install updates and Shut Down' option in Shutdown Windows Dialog box"
This is also found under
user configuration > administrative templates > windows update>
enable "Do not display 'Install updates and Shut Down' option in Shutdown Windows Dialog box"