Windows intune provides you with a simple web based console to do the following:
Manage updates: Centrally manage the deployment of the Microsoft® updates and service packs you choose to all your PCs from the Windows Intune console—freeing up your IT staff from routine management tasks.
Protect PCs from malware: Help safeguard your PCs from the latest threats with centralized protection that's built on the Microsoft Malware Protection Engine and uses the same trusted technologies as Microsoft Forefront® Endpoint Protection and Microsoft Security Essentials.
Proactively monitor PCs: Receive alerts on updates and threats so that you can proactively identify and resolve problems with your PCs— before they impact end users and your business.
Provide remote assistance: Help resolve PC issues, regardless of where you or your end users are located, with remote assistance.
Track hardware and software inventory: Track hardware and software assets used in your business to efficiently manage your assets, licenses, and compliance.
Set security policies: Centrally manage update, firewall, and malware protection settings across all of your PCs, even on remote machines outside the corporate network.
You may read more details here: http://www.microsoft.com/windows/windowsintune/windowsintune-faq.aspx
Full disclosure: I work on the team that built it.