Prevent server reboot SEP SBS 2013 product update

All,

I'm new to SEP and need advice on how to best configure SEP SBS 2013 on a server.
Just tested some configs and it's not completely clear how te best configure the updates on servers.

Setting:

• Installed management server
• Deployed clients to SBS 2008 & desktops (Win7)

Questions/remarks:

• Is it possible to "split" AV def updates from product updates?
• AV def updates should run continuasly on servers and desktops
• Desktops & Servers can only receive product updates via manual interaction
• Desktops can't reboot during the day
• Servers can't reboot during the day

What would be the best approach to reach this using policies and update settings in the SEP SBS 2013 manager?

Thanks in advance!

Mike