Like Neo said the best way in my opinion is using WSUS. You can work around this by directly editing the registry on the client machines which can be scripted using REG.EXE. The WSUS documentation
lists the registry values that need to be set.
You can also use a batch file for distribution. Also read this KB
http://support.microsoft.com/kb/q296861/
Here is an example of a batch file using shortened names
@echo off
setlocal
set hotfixpath=\\servername\hotfixshare
%hotfixpath%\KB817787.EXE /Q
%hotfixpath%\KB819696.EXE -u -n -z -q
%hotfixpath%\KB905414.EXE /quiet /norestart
%hotfixpath%\KB905749.EXE /quiet /norestart
%hotfixpath%\QCHAIN.EXE C:\Hotfix.log
Shutdown /r /t 30 /f