[NAME] - They lock down the factory images with local group policies to disable windows updates so that it doesn't conflict with writefilter and constantly try to download and apply the same updates (resetting with each reboot).  You can temporarily change this behavior on your box if electing option #2.  The registry you are looking for is: HKLM\SW\Microsoft\policies\windows\windowsupdate\DisableWindowsUpdateAccess=1 (set to 0 to enable window update access and logoff/on to take effect)   Changing that registry should get you the access you need to fire off the windows updates but if it doesn't you may also need to change the groupPolicy to make sure windows doesn't reapply the change. Start>run>gpedit.msc Computer config>Administrative templates>windows components>windows update>configure automatic updates (set to enabled or not configured) Remember to do that while WF is off (to make it stick) and when updates are finished on that gold box change these options back to factory defaults before re-enabling WF.  -k
I have three WYSE D90D7 thin clients running Windows Embedded 7 Std that I am wanting to patch with the latest Windows security updates.  If I look at the security patches installed on the machines, Isee the latest were from 2013.  How would I go about downloading the patches from the WYSE support page and uploading them all to the devices?  I know it will go through WDM, but I can find no information on this in the Admin Guide.  Furthermore, there are literally hundreds of patches...do I need to download ALL of them and upload them all to each device??  Any information on this subject would be GREATLY appreciated, thanks.
How to perform Windows security updates on WYSE D90D7 from WDM 5.0