I know suu.cmd has accepted various switched for a long time now, but this is the first time I’ve bothered to engage with it!
So, running SUU v 188.8.131.52:
\\some server\some share\suu.cmd -comparison
will generate a report telling you what can and can’t be upgraded. Most of the time you won’t care, but it’s worth remembering that this program will update network firmware, drivers and disk firmware etc so only run on critical systems after hours.
\\some server\some share\suu.cmd -upgradeonly
will ONLY upgrade components, never downgrade. It’ll do everything in one hit so you’ll probably need to reboot after this, and you may lose networking a lot as it runs so running suu either stood at the console or via remote desktop is recommended.