For those who are manually patching systems using Ilfak Guilfanov's unofficial patch, handler Tom Liston says that you can install it in an unattended mode by using this incantation:

More details are here.  This version looks like it will work well with startup scripts in the Active Directory.  Previous versions were a bit noisy and would create annoying error messages to users that might not understand what they were seeing.

A reminder:  be sure to test the patch above before deploying it across an enterprise.  While the handlers (including me) are running it on our own personal systems and it works as advertised, we can't vouch for any special software you might have in your own systems that could be disabled after the patch is installed.