I would suggest to disable Windows update service in the source image. Instead, add subtask in the template sequence to enable it after image deployment.
One other thing, per my understanding, Microsft only provides windows update solution when FBWF or UWF is enabledon the device side. This is another topic which you might want to double check.