Surely not at all Patched 2008 r2

Anyone has a tips for how can I install the security patch on a never patched 2008 r2 servers. Which has different model & firmware servers with a single baseline with targeting critical & important through Bigfix.