Report Offensive Message

It's free to download and use from Microsoft. Sure, it will take a little bit of time to approve the list of updates on the WSUS server, but it's better than having to manually keep track of this stuff and allowing users to run auto-updates themselves and losing track of who has what patch installed.