Check for missing Windows updates.
Check for missing application updates where applicable.
Use approved tools only, such as Action1 or Windows Update.
Document which updates were found, which were applied, and whether a reboot was required.