When trying to combat software vulnerabilities in the workstation domain, what is needed most to deal with operating system, application, and other software installations?

A centralized asset managing system which has client software deployed to all workstation end-points (Windows, Linux, Mac) would be most valuable while dealing with the operating system, application, and other software installations across the organization.

With this software solution, an administrator can push out remote operating system installations of hardened images, install required applications, update and patch the OS and applications, and even uninstall the software. This will help in maintaining a uniform tested and secure environment on all workstations in the organization.