The process we created nearly a decade ago has been retired. We are now using the same logic to check that we use to download the updates. Nothing fancy for the end user, but a snazzy improvement for the IT guys.