I think we're still working on implementing it.
We're also a bit behind the times, still on a NT4 domain.
(Long story, lot of politics involved)
I know we use a product called Shavlik (non MS) for patching.
Dunno I do more scripting and MS Exchange so I don't work with SMS or SUS

The best solution would be to update the image

Last I knew the image was still on SP2

duh.
Not my deal though, so dunno