I use ManageEngine Desktop Central at one of my customers and have been
fairly happy with it. It is pretty light-weight and the best part is
that it includes automated patch management for MS + 3rd party patches.
Very much a set-it and forget it solu...