Simon-

>One other thing that they might find useful: install a SUS server (Software Update Services) from Microsoft. It's free and makes the installation of approved updates to Windows a complete no-brainer. Also means that the patch only gets downloaded once then locally distributed = savings on web bills if billed on traffic.

I've passed the info on to the client. Here's a link for anybody interested:

http://www.microsoft.com/windowsserversystem/sus/susfaq.mspx

Sadly, MS hasn't checked with their naming dept and so their next version will be called WUS. ;-)