Allow only clients with the latest security patches
RAS Server Console → Policies → <select, copy or create> → Edit
Client Options → Update
Check for updates on startup
Apply
Update