Windows Update or MBSA? Or Both?

I’m trying to determine what’s the best method for keeping my NT/W2k Servers up to date with Hotfixes/Security updates.

I’ve tried “Windows Update” & MBSA and found each produced different results. So which one is the best to use or should I useboth of them. Or neither?