How do you configure your 'automatic update' settings for Windows & Java? Why?

The OS I'm currently managing is Win Server 2012.

I turn it off. I don't trust vendors to never break updates. In addition, newer updates are not necessarily supported by all applications. Filemaker itself proves that. FMSv13 admin console doesn't support Java 8. If it updates automatically, your admin console would have likely broken. I update software as required. Desktops and servers have software firewalls, AV, and there's a perimeter firewall/IDS. Regular users are standard users.

(I have a Win2k8R2 FileMaker server and Win7Pro/Home workstations on my network).

Edited July 23, 201510 yr by OlgerDiekstra
Add some info

Absolutely.  Best practice is to run any and all updates.   Updates need to be tested on a test server before being applied to a production server.

The underlying principle is: "if it ain't broken, don't fix it".  Over the years, updates have been known to break FMS functionality.  So you want to test first or at the very least wait a few weeks/months and carefully monitor the forums to see people that have tested are ok.

BTW: there is 13v10 update for FMS that supports Java 8: http://help.filemaker.com/app/answers/detail/a_id/15021/