Made a case with MS and was advised the KB4023057 - Update to Windows 10 Versions 1507, 1511, and 1607 for update reliability: Novemis our culprit. We deleted them, and they recreated themselves!! This was getting weird now. We disabled them, and they turned themselves back on. We discover a bunch of Scheduled Tasks in Windows -> Windows Update which had been disabled in the past. We have disabled the Windows Update Service in both the image and with a GPO, so this was surprising. We discovered the Windows update service was starting itself and downloading a lot of stuff into the softarware distribution/download folder. Since the Windows 10 November cumulative update our Win10 image was filling up fast.
