Have you got an Anti-Virus Server that pushes out updates to clients?
If you see ones that have not been contactable in a while, start with those.