Not to resurrect a dead thread but... Mike did you ever succeed in this endeavor? We're starting to look at the benefits of implementing this due to some security software we use and I haven't seem to have had much luck in our QA environment this morning.
I have a compliance policy set to check for OS version and if it is less than or equal to 10.13.6 install a compliance profile which tells it to automatically install updates and check every 30 minutes. I put High Sierra 10.13.3 on 5 macs this morning and now 4 hours later none of them have prompted or installed an update to Mojave even though they do show the profile installed.
Edit: 2 of the Macs have now prompted for Software updates, I accepted and they went through the whole ' Installing macOS update' progress bar, etc. But then 30 minutes later when done they are still on 10.13.6 so going to edit the compliance policy to say update if less than 10.14 instead of 10.13.6 and see if that fixes.
2nd Edit: The above did not fix. It went through the exact same thing, one of the macs two macs that updated previously gave the notification to update again, it ran through the macOS install but still came up to 10.13.6 at the end instead of Mojave.