Hello Gary

I don't know if your infrastructure allows this, but you could setup a WSUS http://technet.microsoft.com/en-us/wsus/bb466190 and http://en.wikipedia.org/wiki/Windows_Server_Update_Services.

If needed that WSUS could be on a different subnet and through a router be connected to your PCs.

hope that helps.