Or you can use WnToHDD for installation.

You can try to install Original OS as normally on internal SSD/HDD but don"t use Rufus, UltraISO, etc, to create bootable media.
Try to make the installation via Sergei Strelec WinPE flash drive.
Maybe creating bootable media with Rufus, UltraISO, etc, is an issue.

The matter is that in GP Chinese programmers blocked receiving the updates from MS and generally Windows Update Center itself.

I don't have any extra internal hdd/sdd, but I can install it like Win To Go on a USB flash drive.
I will be engaged in a couple of days - how free time will appear.

Everything "Not Configured" means that your OS lost editing made by Chinese programmers and turn to normal state. Reason is unknown for me.
Take a look at my screen:

all parameters - Not configured

gpedit.msc -> Administrative Templates -> All Parameters 
Check second column - State.
Normally after installing of "clean" (not GP edited) OS all parameters there should be - "Not configured"
If GP is pre-edited some parameters there would be - "Enabled" or "Disabled".

But at first check your OS GP, make screens and drop it here.

You know as far as I remember I had a same issue when I was using this OS Mod.
At first I installed it on the external SSD as Win To Go and everything was OK wih the updates and build.
But when I installed it as normally on the internal SSD I started receiving the updates from MS and build turn to 22H2.
I don"t know the reason why. Now my screens made from original OS installed as Win To Go.
If you have extra SSD or HDD try to install the original OS on it to make Win To Go and check receiving updates and build number after the updating.
For any case: I used to make Win To Go using WinNTSetup.

jag1208@*.ru

I will wait for your opinion...

So, I conclude that in my case, in the original, without any changes, Windows 10 Enterprise G 21H2 is being updated to G 22H2.

So, attempt number two)))
Detailed screenshots of OS installation and updates are below.
P.S. The system is virgin, the English language pack is not installed, no activation was made using the KMS server, I did not make any changes to the registry/group policies.
As you can see from the screenshots, updating to 22H2 is also offered for installation.
Judging by the address from which security updates are downloaded - updates are downloaded from the Chinese server (domain name - zh-cn) and Chinese characters in the name of the updates - including on the page itself with updates.

In the near future I will try to reinstall the system... and download updates from virgin OS without installing the English language pack...

I realy don"t know what is happend to your updating but if you take a look at my screens you can see that all updates I was receiving were with hieroglyphs. But yours is without, I thing your updates are apparently not from Chinese server.