When deployed as a managed device, the OS updates overnight while there's no active user session.