Even if you had sccm you should need Shavlik to push flash or Java updates via windows updates. It’s pretty slick
I’ve heard of that. Right now I’m relegated to WPP. I got Java 8_121 to push but without configurations. I’m not a coder so I find it difficult to write configuration files such as exception sites, etc.