The other option is to have users never update their machines. That's very, very bad. The issue here is your systems administrators not properly testing updates before deploying to production.
Discussion
That is an issue as well. No doubt. But I see no reason they couldn’t allow people the option to manually do it and just send out a bi-weekly reminder.