We also had this issue. Resolution was to create a configuration
profile. Use the APLLICATION & CUSTOM SETTINGS option and choose
com.microsoft.autoupdate2 as preference domain. we chose for instance:
Automatically check, download, and install update...
