Recomendations regarding Windows Update vs Reboot

Hi,
We're rolling out kiosks using Windows Embedded Standard 7 & Secure Lockdown for IE.

Kiosks are not in a domain, but we use SOTI for remotely managing the kiosks, deploying software updates, etc.

What would be athe recommended approach regarding patches coming for Windows Update?

We're considering the following approach:
  Windows Updates Settings: "Download updates but let me chose whether to install them"
  Inteset Secure Lockdown: Restart at : 03:00 AM.

Will the Restart automatically apply pending patches? Or not?

Is this the recommended approach?  And if not, what is the recommanded setup.

Thanks for your input.

The most appropriate method would be to perform the updates at a specific time. However, please read the "Application Installation Guard Utility" section in the  Administrator Guide before proceeding.