Patch Deployment

Good Afternoon,

I’m administering 80 workstations and would like to deploy Microsoft’s monthly patches to all of them.

The thing is, I need to be able to pick and choose which updates to install instead of just pushing out all of them in GPO.
IE8 for example doesn’t work well with some of the third party financial software we use so I would need to prevent its deployment.

Does anyone have any suggestions?

Thanks

Jason