I understand that server patching is not currently supported, but believe that the current workstation patching configuration could also use some adjustment as well.
It would be nice to be able to set a specific patch window. For instance, every Sunday at 3-5am, or the third Sunday of every month at 3-5am. This is critical in managing the availability of systems to the business. It should also have the ability to autoapprove (or not) certain categories of updates available via the winupdates api.
Further, it would also be nice to have a centralized console of all available patches to the systems and have the option to blacklist them completely. An Updates section in the asset menu to show available updates, with an indicator on what would be approved according to update policy, and the ability to push an uninstall on that specific asset, or many assets at once should a bad patch be applied.