If you have similar hardware on all your client machines, another very good option is to run them all off a common image. Then you need only to update that one image which can then be transferred to your client machines via a ghostcast or similar server.

A little too involved if it's not already set up, I know. But I thought I'd suggest it just in case it's possible for you.