The health script is fantastic but noticed that it nukes and re-creates the registry.pol file if an error code is found in the WUAHandler.log.
The registry.pol file is removed, GPUpdate /force is then run. This has caused a registry key "AcceptTrustedPublisherCerts" to be removed from the registry, as it usually is stored in the registry.pol file, which in-turn has caused our 3rd party patches from PMPC to fail as it uses this key to ensure it is trusted to install.