What about server security updates? How do you handle normal package updates, restarting services after an update, etc?
We don't want to push our users to fixed upgrade windows, so we let them choose when it's convenient for their business to have the updates and then act accordingly.