Stop installing patches on the day of release automatically.
Set up a small set of machines, in a separate WSUS group, apply them there, test them there, then roll out to larger and larger groups as you get more confidence in them.
Seriously, "auto-update as soon as something is released" is the stupidest thing I ever heard.
Home users, sure, I understand that they don't have the nous, but even so a "I know what I'm doing" button should always be present.
You cannot forcibly inflict updates on any group of people, though, unless they've CONFIRMED that they have a backup ready and in place. That MS think they can just force it anyway, without even telling the user, and just assume they've been backing up is RIDICULOUS. Hell, even System Restore is pretty much a waste of time that I don't know of anyone ever successfully using to any decent extent.
Biting the hand that feeds IT
