Waiting for SCCM, I wrote a small middleware update app for Group Policy deployment