Great questions about Config Manager. Overall, I think the community here as put together some great info that should work. I'm working internally to get clearer guidance we can update in our docs, but the key factors are here: Ensure the device is scanning Windows Updates for drivers, by ensuring normal automatic updates are occurring (AllowAutoUpdate), the device is scanning WU (DisableDualScan is not enabled,
SetPolicyDrivenUpdateSourceForDriverUpdates is set to Windows Update, the "don't use internet" setting is not enabled). The key thing we are double-checking is how to do this without the Config Manager agent resetting the values, so setting Group Policy in a way that wins over CM.
I don't know what the NoAutoUpdate registry key does, didn't find docs on it... but my suspicion is that if set to 1 probably blocks the device from automatically scanning, requiring an end user to check for updates... so probably not what you want on a managed device.
HTH, and will bring more info as soon as I have it.
Microsoft