Moreover, it lacks some of the features WSUS has. In the case of Intune, not everyone prefers a cloud service. Though both products offer advantages and may be appropriate in certain cases, there are plenty of benefits to WSUS as well. Intune is a cloud service provided by Microsoft, while Endpoint Configuration Manager offers a broader set of functionality than just patching. Microsoft offers other products such as Intune and Endpoint Configuration Manager. Depending on your needs, SCCM may be a good fit as well. There are additional scheduling and reporting options that SCCM offers above what WSUS does. Interestingly enough, SCCM actually uses WSUS in the background.

Many enterprises use Systems Center Configuration Manager (SCCM) for the management of their endpoints, applications, and also patching. By directing your managed systems to WSUS instead of Windows Update, you can define exactly which patches each system will receive and create a system to manage their rollout and installation. This server-based component allows the user to choose which patches are made available. Windows Server Update Services (WSUS)įrequently, businesses require greater control of the patching process, including what patches are being installed to which systems. While Windows Update is a free service, the downside is that users have limited control over the settings, such as when and what type of patches to install. Microsoft’s core update service Windows Update releases a number of patches every month on a Tuesday, hence the origins of the rather infamous “Patch Tuesday.” These patches are relevant for all Windows operating system versions that are currently supported. Another available patching architecture is Microsoft Update, a superset of Windows Update that offers packages for Microsoft Office, among others.

While the names are similar, there are some key differences in how they function, as explained below. Within the Windows ecosystem, patching is generally performed by Windows Update and Windows Server Update Services (WSUS). How then do you keep your infrastructure up to date while minimizing the risk? Windows Patching Architecture But introducing changes into a system, as in patching, does not come without risks, and problems may indeed arise. Microsoft’s mantra is to be diligent in patching. Keeping software and operating systems up to date is critical for ensuring system security. With new vulnerabilities and threats constantly making headlines, frequent patch releases is a must for operating systems.

Patch management windows