No, apt-get is not an option. :)
I'm looking for something to roll out patches en masse to workstations on an AD domain. We're looking at Ecora patch manager, which is pretty damn spiffy for what it does, but it ONLY does what it does - you can't define your own patches, and you can't patch applications it doesn't know about. (Adobe Acrobat, for one)
SMS sounds like it could do what we want it to - but it might be out of our price range. Software Update Services 2.0 has been coming "real soon now" for over a year, and it also doesn't allow custom patching.
Anybody else out there using anything in particular?