You can update scripted or deployments with Microsoft updates via a power shell module.

You can install this ahead in your golden image and just run the last 2 lines of the PS script

Go to https://gallery.technet.microsoft.com/scriptcenter/2d191bcd-3308-4edd-9de2-88dff796b0bc

download the Windows Update PowerShell Module

To install as post tasks:

Create an AutoIT script to xcopy the files to the PS modules directory:

RunWait(@ComSpec & " /c " & "xcopy.exe .\source\*.* C:\Windows\System32\WindowsPowerShell\v1.0\Modules /s /q /y","",@SW_MINIMIZE)

Zip that along with the files to install

I created a task group for the 2 items

First task copies the files

The second task installs and starts the windows updates. (check reboot required for this task)

The powershell script uppdate1.ps1: (line 1 installs; line2 adds Microsoft-updates as well; line 3 executes the job)

Import-Module PSWindowsUpdate
Add-WUServiceManager -ServiceID 7971f918-a847-4430-9279-4a52d1efe18d -Confirm:$false
Get-WUInstall -MicrosoftUpdate -IgnoreUserInput -AcceptAll -IgnoreReboot -Verbose

Here are the tasks within my custom deployment ( note I run the update after I install Office to get those updates also.)

This is a guide that will help you build a Script to Disable IPv6 on all non tunnel interfaces and on IPv6 tunnel interfaces.

If you wish to perform a different IPv6 related task, check this post from Microsoft, and edit the script accordingly:
https://support.microsoft.com/en-us/help/929852/guidance-for-configuring-ipv6-in-windows-for-advanced-users

Things to consider:
1- Test the script in a controlled lab or Test device first.

2- The DisabledComponents registry value does not affect the state of the check box. Therefore, even if the DisabledComponents registry key is set to disable IPv6, the check box in the Networking tab for each interface can still be checked. This is expected behavior.

3- For this effects to take place, the computer needs a restart.

4- I only tested this with Windows 7 and Windows 10 x64.

5- You could use this PowerShell Script to verify if IPv6 is disabled or not:
https://gallery.technet.microsoft.com/scriptcenter/Ipv6-enabled-420e0123#content

6- I am using KACE Systems Management Appliance Version 9.0, and agent version 9.x.

Steps:

1- We are going to the Windows Registry, to make sure the key needed to disable IPv6 is not there:

2- We go to our KACE SMA Appliance and Build a new script: