distributing 2000 security updates

I rolled out Windows 2000 using Ghost 7.5 and Sysprep to about 400 workstations early this summer. I used a single image. I have successfully distributed changes to the workstations over the past 6 months using AI (Ghost Auto Install). Now I want todistribute Windows security updates using AI and I am having a problem. I started with a clean image and I ran the snapshot, then I ran Windows Update from IE 5.5 (I deselected Windows 2000 SP3 and IE6) and installed a total of 21 updates. When the updates were complete I said no to the reboot and ran the compare part of snapshot to capture the changes and built a reboot into the package. When I apply this package to another clean fresh image to test I get the following error upon re-booting "The procedure entry point LsaOpenPolicySce could not be located in the dynamic link library ADVAPI32.DLL". I have tried rebuilding the package many times (I've been at this for over a week) with no luck. If I reboot before I run the compare portion ofsnapshot I get a different error when applying the package to a clean install, "Cannot find Winmgmt.cfg" on installation disk". Has anyone had any luck distributing windows security updates to 2000 clients via AI or another product? I would like to selectively distribute these updates without requiring user intervention and I certainly do not want to visit each workstation individually. Thanks in advance for any suggestions.