You can use the Windows Server Manager GUI or PowerShell:
Server Manager GUI: DO NOT ALLOW NEW CONNECTIONS
Launch Server Manager- Click REMOTE DESKTOP SERVICES
- Click on one of your COLLECTIONS (top left)
- Right click on the server in question and select DO NOT ALLOW NEW CONNECTIONS
- Wait for the ALLOW NEW CONNECTIONS field to change to False
- Run Windows Update on the server in question
When the updates are done and the server is rebooted, just right click on the same server and select ALLOW NEW CONNECTIONS