Why would they update hang on boot up then? When the computer boots up it gets stuck "installing update 1 of 1" until its killed remotely or a reboot is forced.
Is there any way to install these through WSUS? There's also no way to have them timeout in the event that background services are open.