I decided to solve this problem a different way. I created a snap in that launches a VBscript that I found and modified to run updates on the image when deployed. WindowsUpdates_1.2.vbs This script runs updates and installs them, as long as they are not hidden. It will continue to run and install updates until it runs a check and finds none left.
I still have a practice of downloading the images to a machine and updating them every 2-3 months to avoid 100’s of updates over time. But this works really well to make sure they get updated every time they are deployed.
This also has the added benefit of being able to be run anytime you want to force updates to a particular system. It does not reboot automatically, but Windows updates prompts for reboot if needed.