Remote admin of Software Update for Macs on a a Network?

[Joey Cupcakes]

The IT head of the (mostly Windows) company where I service 3 Macs (2 Lion, one Leopard) is insisting on the ability for him to push Apple security update patches when they are released (he doesn't trust the three users to respond when prompted by Software Update) before he will "let the Macs on 'his' network... so:

1. Remote admin application for administering Mac OS updates on a network in a single operation (as opposed to logging in to each machine individually via vnc or such)?

And given that, here's the kicker:

2... from aPC??

I imagine #1 is possible and that #2 is just the guy being a putz.

Thanks for suggestions...