If you have Windows server, you have WSUS. No need for third-party (though third-party often does it more nicely).
There's no excuse, one you have more than a handful of computers, for not using WSUS for exactly what it's intended for - scheduling updates, revoking them, and centralising all Windows Update downloads in your organisation.
Biting the hand that feeds IT
