I'm currently attempting to make our server patching more automated. We're already using WSUS and it is working well, but at the moment we have it set to notify for download and notify for install ...