A security update must be rolled into a pooled desktop image. Which release process best controls risk?

1. Delete the last working image before testing
2. Copy the new image only into a user's profile container
3. Patch every host manually with no record of differences
4. Build a new version, test it with representative users, and roll it out with a rollback plan