Is anyone out there responsible for sending out patches, fixes, etc... for their network(s)?

I'm trying to develop a means of tracking changes instituted across multiple, non-WAN connected LANS. I can't query the servers or workstations, but I do control every patch (oracle, MS, database updates, etc) that gets sent to them.

What I've done in the past is that when a programmer needs to update an application, I assign that update a control number and enter it into an excel spreadsheet. Then I send out the update to the servers. This is dull. Are you doing anything different? Maybe some cool access database or some other form of change control

-nuts