Keep Windows Server uptodate
To keep your servers uptodate, following Cron Job would be sufficient.
Keep Windows Clients uptodate
Usually Windows clients should install the Updates automatically. Since some clients are powered on forever, the Windows way of installation is not working.
AD Integration
If you don't like to import the whole Active Directory you are able to import specific OU by using a custom task.