If they are failing on install you will want to look at or upload the CBS.log and dump and examine the WindowsUpdate.log
CBS Log location
C:\Windows\Logs\CBS
Windows update log you need to dump with powershell like so (dump to desktop)
Get-WindowsUpdateLog -LogPath $($env:USERPROFILE)\Desktop\WindowsUpdate.log