Compared to using Settings > Windows Updates to install Windows updates onto Win2016 instances running on AWS EC2, I found that the command line sconfig works much better.
sconfigselect menu choice 6 for Windows Updates
wait
R for Recommended updates only
wait
S for a Single update
etc.
The menu choices are very simple and for some reason they work MUCH more reliably than doing the "same" update from inside the Windows-10-lookalike graphic user interface. Go figure.
SCONFIG is your friend.