I am working on a kix service to install patches... domain service acct has admin on desktops but not servers.
controlled by a ini file on each distro server that contains the [reg key / file version] to test for to determine patch install eligibility.
It is actually much simpler than I though it would be... the hardest part was getting net admin to approve a domain user acct that has admin on every desktop
