Patch Management
Windows and application updates rolled out on a schedule, with a report of what's patched.
Monthly Windows updates and third-party application updates go out on a schedule you approve, and you see which machines are current and which are waiting on a reboot.