Give stronger controls to enable updates to occur without requiring a user to be logged in.
For my business, it seems like no matter how the IT department sets the network policies, 90% of the patches and updates will only occur AFTER a user is logged in. This seriously degrades the ability of the workers to conduct business. In a large business, even 15 minutes once a week is a substantial cost. Allow network adminstration policies to be established so that upgrades and patches are designed to occur WITHOUT being triggered by a user LOG-IN event.