In order to remotely manage and patch Vista, you need to tweak and reenable the remote registry service.
To do this via group policy, build a policy that turns it on like this:
The group policy setting is under computer configuration, Windows settings,
Security settings, System services.
Scroll to “remote registry”, define policy setting, choose to make it
You’ll need to do the same for Win7