I just installed Desktop Central and want to start patching computers. Initially I added the computers to DC and used it to installed the  latest Java, Adobe Reader and Adobe Flash.

That worked pretty well, but now I am realizing the larger goal is to keep all the computers as up to date as possible. So, given that I have a bunch of computer already out there with various software in various states of updatedness what is the best way to:

A: Make sure all the computers have the agent installed.

B: Make sure they all have the latest patches?

I realize these are big questions, I am just looking for some guidance and to hear how others have implemented DC. Should I add the agent install to AD? Should I do the "Scan systems, download and deploy missing patches" under Automate Patch Deployment?