We've been told that devices that aren't updated by either June or October will fail to receive updates to the Secure Boot trust stores and Windows Boot Manager respectively during the installation of a cumulative update that contains these changes.  What's the experience when the Cumulative Update runs on these devices?   Will the CU still install "successfully", but just leave the machines without those changes?  Or will the CU fail to install and rollback the entire CU as a result?