I've asked Mr. Google about this, but he hasn't been very helpful.
I've created my thin base image of Win7 x64 Enterprise and generalize it before capture. I have steps in the System Configuration phase that set the registry keys for pointing updates to our WSUS server.
I just recently noticed that updates are off after the template has finished. A simple click of the button will turn them on, but that leaves it up to the technician to ensure that is done.
I went back to my base image vm and the updates are turned on before generalization, but when I generalize the vm, sysprep appears to be turning it off before shutting the vm down for capture.
I am running 9.5 SP2 and am planning on moving to 9.6 soon, but this doesn't seem to be a problem with LD. Am I missing a reg key that turns them on? Below are the registry settings that are being made in my template: