Microsoft have helpfully deprecated the GPO that disables WU notifications for non-admin users (for use on RDS for example). The only “solution” is to nobble the exe that shows the pop-up. Run the following script to adjust the registry so that the exe is replaced by a rundll32 with no parameters (that then simply exits silently):
reg add “HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution\ Options\MusNotification.exe” /v “debugger” /d “rundll32.exe” /f