What about something like Windows Server Update Services - WSUS?

I don't know anything about what you have now and exactly what your after but you could create a WSUS server that talks directly to Microsoft Update and downloads the latest patches you can then distribute the patches from that machine.

From my experience WSUS is very good, and is quite easy to set up and is quite configurable.

http://www.microsoft.com/windowsserv...s/default.mspx

Good resources are:

Deployment Guide: - Deploying Microsoft Windows Server Update Services.doc
Reviewers Guide: - WSUSReviewersGuide.doc
Operations Guide: - WSUSOperationsGuide.doc
Step by Step Guide: - WSUSStepByStep.doc

All these should be available on the site above, if you can find them PM me with your email address and I will send them to you