I'm not sure I understand what Heimdal actually does. Aren't updates handled by Windows Server itself?
replies(1):
Also, Microsoft has been aggressively removing the ability to control what patches you install, I assume because they don't test most combinatorics of possible patches running and people kept picking and choosing, so if you still wanted that level of control despite being told "don't do that", you would use a system like that.