What is your normal software and patch distribution method on your network? What OS on the clients/servers? Is this network part of a domain? Are you looking to pay for a licensed product or are you seeking an open source solution? Any additional information you can provide would be appreciated.
Individual programs are not patched until the user calls and asks to be updated, (usually "futrue version" pop up). We use WSUS for microsoft updates and ePO for McAfee. Everything else is in limbo until IT can get to that computer and update it. We use a domain with Sever 2003 R2 servers and 95% XP SP3 Clients, the rest are Vista. Open source or licensed doesn't really matter. It could be done with logon scripts, but we would perfer to have a management program solution like WSUS or ePO.
Since your options don't seem to be limited by pay vs. open source, you have a multitude of possible solutions. You could purchase the now outdated SMS 2003 product from Microsoft, or elect to go with their "latest and greatest" distribution management product SCCM. We have dabbled with another similar product here that shows promise: Altiris. An open source option that I ran across in my research is WPKG. I can not vouch for WPKG but it seems a viable solution. Keep in mind, with a paid product, you are paying for support as well as the software. If you elect to go with an open source option, support can be somewhat limited in scope.
I hope this helps?
Thanks, I'll start researching these, if there are any other options out the let me know.