výcuc ze skriptu:

před ie11:
%IE11%\Windows6.1-KB2533623-%arch%.msu /quiet /norestart
%IE11%\Windows6.1-KB2670838-%arch%.msu /quiet /norestart
%IE11%\Windows6.1-KB2729094-v2-%arch%.msu /quiet /norestart
%IE11%\Windows6.1-KB2731771-%arch%.msu /quiet /norestart
%IE11%\Windows6.1-KB2786081-%arch%.msu /quiet /norestart
%IE11%\Windows6.1-KB2834140-v2-%arch%.msu /quiet /norestart
restart

ie11:
%IE11%\IE11-Windows6.1-%arch%-%jazyk%.exe /norestart
hotfixy k IE např:
%IE11%\ie11-Windows6.1-kb4483187-%arch%.msu /quiet /norestart

KB3020369 priprava pred restartem na rollup
%rollup%\Win6.1-KB3020369-%arch%.msu /quiet /norestart
goto RESTART

SP2
%rollup%\win6.1-kb3125574-v4-%arch%.msu
goto RESTART

KbSp2 # Security update SP2 nahazet do adresare rollup_x86 / x64, cyklus je sam nainstaluje
REM # https://support.microsoft.com/en-us/help/4009469/windows-7-sp1-windows-server-2008-r2-sp1-update-history
...

edit:
ta proměnná bude 32bit nebo 64bit:
if "%Processor_Architecture%"=="AMD64" (set arch=x64) else (set arch=x86)