In every environment you will run across systems that are missing some patches. Sometimes your patch management tool fails or the other circumstances prevent you from getting a patch to a machine. Most places I see, prevent their machines from going straight to Windows Update and I’ve found myself in situations before where I want the simplest solution to apply a patch on a remote machine without the user knowing and without going thru some SCCM or [INSERT TOOL HERE] hell. Here is a simple method that I have used in the past. It is a great cheap Windows patching solution. Of course you need remote admin on the machines in need of the patch to perform these actions.
First visit the appropriate IT professional page to determine the correct switches (usually /quiet /norestart). For example, for MS11-058 http://technet.microsoft.com/en-us/security/bulletin/ms11-058. Then create a text file containing the names or IP addresses of the machines in need of the same patch.
Then create a batch file that reads the ms11-058.txt and copies the patch to the remote machine’s c:\windows\temp and then runs the patch command syntax on the machine.
FOR /F "tokens=*" %%G IN (ms11-058.txt) DO xcopy Windows6.0-KB2562485-x86.msu \\%%G\c$\windows\temp\
wmic /node:"@ms11-058.txt" /user:YourAdminAccount process call create "cmd.exe /c cd c:\Windows\Temp && C:\Windows\Temp\Windows6.0-KB2562485-x86.msu /quiet /norestart"
And if the Microsoft gods are smiling on you that day, the pc should now be patched.