For the patched install of 8.6
From command prompt....
msiexec /a toolkit.msi SERIALNUMBER="serial number" LICENSEPIN="license id" TKROOTDIR="c:\mks" /l*v mkslog
Used this to creat admin install in c:\admininst
copied tk.msp into c:\admininst, then from command prompt
msiexec /a toolkit.msi /update c:\admininst\tk.msp
Once this packaged up, copied contents of c:\admininst to SMS server for deployment...
Note that in the configuration utility, it shows up as version 8.6.04, with no patches installed, but it HAS taken the patch :-)