> The ability to survey boxes and push out patches and policy though AD is also a big feature. We have similar tools that can do this (CFEngine and Puppet) but once again show me a single package that has all of this integrated and makes it trivial to ensure you're compliant on your network for patch levels?
Companies routinely run Linux and Unix on tens of thousands of servers, and keep all of them up to date with all the right patches. Why would that same infrastructure not work for Linux desktops?
apt and yum both provide you will all the info you need to keep your systems on the software that _you_ want them to be on (which isn't necessarily the latest and greatest that's been released, you can trivially run your own repositories that only contain approved software and everything can trivially update from there)