what to do when desktop updates cant be automatic

thx Liang and Amit. 

Liang, once the notification has arrived and i've temporarily turned off security, can i hit a button on my instance of the desktop to say "ok update"?

Amit, thats a lot of info but i'm only at a 20,000 foot level right now.  Does that deployment strategy apply even after say 10 of our users are already using the desktop?  ie will it perhaps destroy anything they already have?  And why would i want that over what Liang is suggesting?  I'm looking high level right now so i can get the "vision" and i am still curious about perhaps the service itself eing used as a "public desktop".  maybe with such a strategy we wouldnt be worried about peoples' desktop instances?