You may have seen that SQL Server Management Studio 2017 automatically bubbles and asks for updates. But your users do not have permission to install updates and you maintain updates via WSUS. SQL Server Management Studio 17.x is available via WSUS.
Microsoft has for unknown reasons moved this setting into HKEY_CURRENT_USER. How stupid is this... Software is deployed per machine and not per user. Software is only deployed by idiots per user.
Now you have two options:
- Walk to every users and uncheck the Tools > Check for Updates > Automatically check for updates for SQL Server Management Studio setting.