As promised, here’s the link to my presentation at the 2012 Rock Eagle Computing Conference: Leveraging Active Directory Group Policy to Patch Common Windows Applications
If you have any questions, please don’t hesitate to post a comment on this page.
One person had asked about doing reporting via GPO. I’m not sure of what (if any) native AD support there is for doing inventory reporting. We ended up using OCS Inventory to track machines, and deployed the agent via GPO.