Our organization has less than 100 people all on laptops running Windows XP. We encourage Firefox, though a number of people still use IE7. But lately we've gotten some spyware/virus attacks that have come in through outdated plugins. Everyone is at different levels with plugin updates, and it tends to be the case that we don't find out about someone neglecting updates until they are affected by it in the form of some webpage with spyware in it crawling through an old Java or Flash version.
We have System Center Essentials set up to keep all the computers up to date as far as Windows Update. We also have Trend Micro which has protected us well so far, so the issue is only of preventative maintenance at this time.
What is the best way that we ensure that everyone's computers are kept up to date with the latest versions of Flash and Java? Can we use some sort of automated check to scan everyone's computers, akin to Mozilla's Plugin Check but on a widespread scale? Can System Center Essentials come in handy for this? Those of you who manage computers like this, how do you keep everyone's plugins up to date?