Found a link over on Jeff Alexander's blog to slides and audio of a presentation on how Microsoft does patch management using SMS 2003. I know it always helps me to see how others do things. One of the key issues around patch management is getting critical patches out quickly. This has as much to do with how you architect your solution as it does with the tools you use.