Active Dir. & machine patch level control solution?!

[EarAche]

I am looking for help with controling the patch level of all machines on an Active Directory Network. Currently, there are no controls for this other than on the individual machines. (I mean on my current network.)
I was looking at WSUS from MS. Quite frankly, I can't figure out how to even deploy it. Basically, I need to be able to control and/or view what machines are up to date on MS patches, updates, etc. besides going to each machine.

Please advise.
Thanks in advance.

 

[porkchopexpress]

WSUS should do everything you're looking for get yourself a test box and install it it's pretty straight forward.

http://www.wsuswiki.com/InstallationGuide