Please look at allowing different deployment options based on the updates criticality.
For example If an update is just an update, not critical, no known vulnerabilities run update at next patching cycle
If patch is critical (known exploit in the wild etc) run it immediately on all systems.
SO deployment varies on criticality of the specific update... Adobe Acrobat update X is a feature update no security updated... run on Patch Wednesday
If Adobe releases a patch to fix known exploit, it deploys asap.