Dustin, I'm in the same boat. Yes there is Software
Update Services (SUS) but that was going to take some time
for me to understand and set up. So I set up a group
policy to configure Automatic Updates on all the clients.
Anytime there are patches/critical fixes, Auto Update
downloads and installs them for me at a prescribed time
(option 4), regardless of who is logged on (i.e., whether
or not they have administrative privileges). The only
problem is that, my users have been in the middle of
working on a document and Windows throws up a dialogue box
telling the user that New updates have been downloaded and
installed and Windows must be rebooted (for those fixes
that require a reboot). It asks the user whether or not
he wants to reboot but the No button is greyed out and
there's nothing that can be done except reboot. So the
user loses some of the work they were working on.
Hope this helps