SCCM can push patches whenever the admin feels like it... maybe this would work for you? Although it would require setting up the server somewhere.
Why use a proprietary technology?.
This is microsoft we're talking about, proprietary is what they do best.
Last yeer I kudn't spel Engineer. Now I are won.