Dynamic Group Refresh

I am using dynamic groups to do patch management. The issue I am having is
that I would like a newly imaged machine that gets rolled out automatically
update to the dynamic group so that it recieves all critical patches.

I can't seem to do this automatically. Any one have any thoughts for doing
this?