I have my PC's set to install updates every day at 1:00 AM from WSUS and automatically reboot. Everything about that works. I want to push out IE 10, which also works fine. But I would like to install the latest Cumulative Update to 10 after the initial install is done so that the PC is ready with IE 10 and the CU all at once instead of waiting until the next update window at 1 AM the next day. Basically I want to avoid having the GA version running for a day before the CU is installed. And I need it to all be done by start of business. So, ideally it would go:
- Install IE 10
- Reboot
- Check for updates, detect the CU as needed and install it
- Reboot
I have a deadline set on the CU so that as soon as a machine checks in and finds it, it will install it. That gets me partway there, but the problem I have is that #3 doesn't happen after the first reboot. I do not have the detection frequency set through GPO, so it's the default of every 22 hours. Is that my issue? I would have thought that it would check in when the service starts up after a reboot regardless of the detection interval setting, but that doesn't seem to be the case. So I could change the interval to every hour, but I'm a little hesitant to do that for performance reasons.