40 votesRahamim commented
You can deploy third party updates to the collection that you deployed a task sequence. what they don't tell you is you need to export the WSUS certificate that you see in the console and import it during the task sequence. Also, add another step to add the registry that controls the allow signed updates from an intranet Microsoft update service location. Do those steps before the install updates steps and see the magic happens.
Try this out over CMG in #SCCM TP 1906Rahamim commented
I heard they use TeamViewer for internet based clients... Go figure...