Windows Server best practise security and audit purpose

please shared the industry best practice in the following

AD member PCs local administrator recommended  practice  - Do we need to rename the use /....etc
AD based auditing
windows update  for win 7 and 8  recommended practice - patch deployments
why the system will take the long time to update the patch . how do we  manage this in the  24 x 24  system