SUS is a pull option for deploying Windows updates. Basically it allows you to host your own copy of the Windows update site on your local network and approve what updates to be installed. You will still need to visit every computer to configure it (unless you are using group policies in AD). It will only work for patches for Windows 2000, XP and 2003. I know that Symantics Ghost has some push options on the enterprise edition that you might want to look at.