Please let admins install update on boot or next boot to have more control over wich machines gets a update and the users are not bothered during there work but before the logon or after they shutdown the device.