not for nothing, but i solved this (i think it applies here) in a simple way. i wrote an application that forces a logoff of all users on a computer. it runs on a scheduler at night at a certain time. updates deploy after the timed logoff. the app was necessary because the subscribers to our WSUS were a mixed of domain and non-domain computers.
i knew that there would be situations where specific users should be able to stay logged in, or specific machines should not be forced, so the app checks the registry. if the machine is flagged as 'doNotLogoff', the step is skipped. if, as the app iterates through all logged in users, a user is listed as 'doNotLogoff', that user is skipped.
would this solved the issue? i do not believe in forcing updates on people during the work day. it disrupts productivity.
i knew that there would be situations where specific users should be able to stay logged in, or specific machines should not be forced, so the app checks the registry. if the machine is flagged as 'doNotLogoff', the step is skipped. if, as the app iterates through all logged in users, a user is listed as 'doNotLogoff', that user is skipped.
would this solved the issue? i do not believe in forcing updates on people during the work day. it disrupts productivity.