I've written script, that we've used for months, which forces the deployment of Windows updates. Essentially during login if folders and EXEs are detected in C:\Program Files\WindowsUpdate\wuaudnld.tmp\cabs it enumerates the folders, runs the EXEs in silent mode, deletes the EXE & folders and runs QCHAIN to complete the process and prompts to reboot.

The one minor snag is that occasionally the EXE doesn't delete following execution, but will after a reboot. Very strange. I've always checked for successful execution of a patch with @error=0. For a few patches I've noticed the error result code is 3010. Can anybody tell me what 3010 is?

Thanks muchly!