Would like to remind everyone that I have a more reliable Windows server patching system than Ansible or SCCM or whatever you weirdos use, and it's written in Batch and VBS with no dependency on an external system or server and authenticates with plain jane Kerberos over RPC (via psexec), and allows strict control of reboots for those touchy production servers where downtime has to be minimized.

And it'll update your VMWare tools with a Powershell and PowerCLI hook if needed.