Microsoft has given us WSUS to manage their patches, but it doesn't help with the current vector of attacks. Flash and Java are widely exploited to pwn your machines. In this article, we'll look at deploying Flash via an AD GPO.

Pros

• You already have the AD, use it

Cons

• Can't schedule installs, installs automatically happen on next restart
• Can't see results of install without looking at the client's event logs.