Thanks for your help in the forum so far. I have one last question.

When deploying patches as part of a policy, is it possible to deploy in a way that will ensure only a single reboot after all patches have been deployed, rather than reboots as and when required?

I realise that some patches, such as some .NET patches from MS, require an individual install and a reboot but is it possible to work around those?