This is a broad question so I am going to try and keep it as simple as possible.
We deploy Windows patches via WSUS to hundreds of Windows 2000 and 2003 servers on our network. I would like to be able to run a job or a script (preferably automatically at a certain time) to validate against each server. I need it to tell me what update was installed, if a reboot is required, and/or if it has already been rebooted. Can this be done, and can it be done outside of WSUS?