Re: Update management
It's sad how the Windows package management and updating systems are so terrible unless one forks up mega cash for SSCM (and wants to deal with the extra complexity). Binary executable installers need to die but they are sadly an ingrained part of the Windows culture. Even MS Office (once a poster child for this) hasn't supported GPO/MSI deployment since 2007 which means writing ugly scripts to do all the work.
Believe it or not it is actually possible to roll out Reader and Flash via GPO but it's by no means straightfoward.
One small business setup I work with uses Ubuntu and these sorts of problems just don't exist as everything gets patched daily via Apt. It's pure bliss by comparison.