Need good practise in patch update

I have a OSX server and turn on the update services. And apply policy to make enrolled machine point to the update server. But i would like the enroll machine will mandatory update available updates.
So i will like to check "Install OS X updates" and "Install system data file and security update" in the APP STORE preferences setting by casper roll out
My scenario:
Managed m
achine update service was point to the MAC update server
Once we enable the patch in the server, the enroll managed client will update the OS X update and Patches by itself