Puppet not only allows you to deploy changes but makes sure they stay. There is something called Puppet Dashboard, that allows you to see all the installed clients, who has a valid config, who is outside that config. This allows you to quickly see machines that need attention. There are some better screenshots here [2].

[1] https://puppetlabs.com/puppet/related-projects/dashboard/

[2] http://bitcube.co.uk/content/puppet-dashboard-six-months