Welcome to my world ... we have enterprise level products that do software patching and password changes for service accounts and the like. They work sell for OS based things most of the time. They seem to work fine for non-clustered SQL servers as well. However they have issues with active/passive clusters and with N+1 clusters when is comes to SQL Server.