I always do CU updates in a elavated command window

create multiple admins for administering workstations, servers, vmare and DCs.