The deployed devices have WSUS GPO settings applied to them, and one of those is to prevent devices connecting to Microsoft Update (internet) to automatically download updates (HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DoNotConnectToWindowsUpdateInternetLocations = 1).