the problem
'I can't believe no one here has said this yet but every single aspect of Windows Update that you can think of is configured using Group Policy and WSUS and is exactly what an organisation of this size should be using'
the problem with this statment is that you assume the NHS is one It controlled enity. Its not.Even down to a building of say 100 people will have there own It staff and doing the own thing compared to say the building next door. That 90% of the problems with It in the NHS and 100% of the reason why its budget is so high.