Windows Update, Good vs. Evil

Scott H. pointed out that they typically disable Windows Update on their production servers.  Makes perfect sense to me.  On the other hand, I want Windows Update to pull updates for EVERYTHING on my dev box.  I don't want to look for Office patches, SQL patches, MapPoint patches, etc., etc.  I want a Just Patch Everything button.

I'm curious what people think about Windows Update.  Good?  Evil?  Both?

We have a policy of keeping our dev servers up to date via Windows Update to ensure the latest patch/hotfix/service pack/whatever doesn't bite us when IT updates the staging & production servers.

See Windows Server 2003, and something called...being a Security Expert from Scott H.

Having worked at Corillian with Scott H for a while I understand their need to control this to the nth degree, but whether everyone needs this level of lock-down is questionable.