Remon.mulders I didn't even realize delay until next login was available as a policy supported push. I just tried it on a test machine and it works - as long as the target machine is powered on and connected to the network. If the machine is powered off, or a laptop off the network at the time I start the push, the endpoint device never attempts the software distribution no matter how many times I force a synchronization and login to Windows.
So, basically, this only works as a push.
While this is an improvement, and should allow me to catch most of our workstations, many workstations that are turned off (until we get V-Pro working) and laptops will be missed. Like I said, at least this is an improvement, and I would anticipate this will be a way for us to distribute the most of the software update until we get a fix.