I need to push out KB2921916 (always trust publisher) fix, before rolling out the latest Micro Focus client. Whats everyone's favorite method for forcing/ensuring a bundle gets installed ASAP? I plan on using the login script to run acu.exe to upgrade the client, though I guess I could use zenworks as well.

My plan is to run "wusa c:\hotfix-trustpub\windows6.1-kb2921916-x64.msu /norestart /quiet" (obviously changing C to something on the network). The hotfix requires a restart to work properly, but don't want to force users to restart immediately.