When I was a sysadmin, I could push my updates via Group Policy. It's not that bad. (I'm now in development so I don't know the Microsoft current recommended method).

The cost of an upgrade is the daunting part IMO. We need to buy a bazillion CALs (licenses) if we want to switch to Windows 2008 server-side, for example.