Automatic install Window 10 update

updates get installed automatically
upgrades need user intervention.

You could trigger the upgrade without wsus.
Extract the ISO to a share and use a scheduled task to make clients install it. The task would be a simple batch:

\\server\share\setup.exe /auto upgrade /dynamicupdate disable

Select allOpen in new window

Executor: system
Trigger: some time that you define + randomization if LAN bandwidth is a problem.

Set user machines to update at 3:00am.
Set active hours for 7:00am to 8:00pm.
Turn Auto Updates ON.
Make sure the Default Setting for sharing updates is ON.

Set this way, most updates will occur automatically and leave the system at a login screen the next morning.  No user intervention.

Some feature upgrades may require user intervention but they are less frequent.

I mean the Critical update deployed on WSUS, seems like user need to install manually...

Can I configure the GPO to install the patches automatically ?

Thx

The majority of Windows 10 updates do not need user intervention. Leave machines on and logged off overnight Patch Tuesday and for a couple of days.  

Windows 10 has drifted away from "critical updates" to monthly "all updates"

Set a deadline on the updates or change your group policy
Allow Automatic Updates immediate installation to enabled
for further information review
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd939933(v=ws.10)

To support what David gave you: https://docs.microsoft.com/en-us/windows/deployment/update/wufb-compliancedeadlines shows the dealine options and lists what will be shown to the end user and how.

However: feature updates are best installed at maintenance times when no user is around, because they suspend bitlocker protection. So in case you are using bitlocker, using WSUS is NOT recommended, but the script option that I listed should be used at times when the computer is not accessible by the user.

In Window 10, the patches are deployed into the client workstation. However, (unlike Window 7) it doesn't pop up in the system tray bar, nor it will ask to install when user shutdown the workstations. Hence, the patches are always ignore for users.
error.png

Simon, your comment does not indicate that you read the comments. Please give feedback on the comments.

Sorry, can't get what I need to do ... attach the GPO related to window update for your reference.

Thx
WSUS-GPO-Setting.png

Is that what u mean ?
WSUS01.png
WSUS02.png

Please divide your question points fairly.