No Good Options...
....for small to mid-sized networks. The cost and complexity of SCCM and SCOM are just not worth it, and the manual / AD install options don't provide central reporting. We were a long-time Forefront user but switched to Symantec Endpoint Protection last month because of these issues.