This would be facinating integrating with inventory,
The workstations would have a 'patches' tab, for the needed patches of the installed software programs (windows, adobe, office, linux, or what have you)
and a one click push if they don't have the up to date patches!