You need to ensure that Windows updates are automatically applied and cannot be disabled by users

A company has client computers that run Windows 8 in a kiosk environment.
You need to ensure that Windows updates are automatically applied and cannot be disabled by users.
What should you do?

A.
Configure Windows Update to install updates automatically.

B.
In the local Group Policy, enable the Turn on recommended updates via Automatic Updates policy setting.

C.
msiexec /i app1.msi /qn

D.
In the local Group Policy, configure the Remove access to use all Windows Update features policy setting.

Explanation:
http://technet.microsoft.com/en-us/library/cc775792%28v=ws.10%29.aspx
Turn off access to all Windows Update features:
This Group Policy setting is located in Computer Configuration\Administrative Templates\System\Internet
Communication Management\Internet Communication settings.
When you enable this setting, the operating system cannot be updated through Windows Update, and
Automatic Updates is disabled. Users or administrators can still perform actions such as clicking the Windows
Update option on the Start menu, and the Windows Update Web site will appear in the browser.
However, it will not be possible to update the operating system through Windows Update, regardless of
the type of account being used to log on.
I think that is exactly what we want to happen in akiosk environment.
Kiosk Computers will still be able to receive theirupdates from a WSUS server.