There are really three ways to get updates into your OS image:
1) At planning time. On the WDS Server, you can service your OS image to update it offline.
2) At deploy time. This seems to be what you're talking about - after image apply, checking to see what's available. It is not supported.
3) On first boot Windows will run Windows Update to get any available updates.