I'm assuming this is normal (although nothing in the docs mentions this) that ZPM in ZCM uses/requires the Windows Update service?

wuauclt shows up in my event viewer logs with a bunch of errors

probably because we turn that off so that our pc's don't go out and get stuff from MS.