I still think there is a GPO contorlling this. when you are logged in as Domain Admin what are the settings for Windows Updates? Is that greyed out?
to verify what GPO's are applied goto start\run type cmd
type - gpresult
look for Computer Settings and Applied Group Policy Objects