Microsofts SUS.... It's brilliant....

I don't have public facing servers that have "abnormal" stuff on them so I apply the patches automatically and deal with any issues I might get by uninstalling the patch.... I have yet to have an issue that requires a patch to be uninstalled.