All my Surface Pro users became WSUS clients upon joining the domain. This is fine except they have to remember to check for updates from Microsoft to get any updates to the English Input Personalization Dictionary (KB2881553) or the hardware updates.
Does anybody know why these don't exist yet in WSUS?