Deployiong Windows Updates to Remote Sites over slow links

What is the best method iof distributing "managed "Windows XP Critical Updates to Hundreds of remote sites each containing 1 XP Computer and 10 XP Embedded Systems?
When I say managed, I mean either using SCCM or WSUS.

Remote Sites have DSL or T1's.

Any feedback\suggestions would greatly appreciated.
andrewm9199Asked:
Who is Participating?
 
larry urbanDevOps EngineerCommented:
I like WSUS and set the time update time for 1 am. if you use SCCM you will just be installing WSUS on-top of it anyway. it is easier to just use WSUS and it uses less bandwidth than the SCCM. Also, SCCM would have to have a remote server on each location where the WSUS will just receive queries for updates.
0
 
techjunkyjoshCommented:
Like Todar stated SCCM uses WSUS for Windows updates. I would go with a stand alone WSUS server and not use SCCM at all. SCCM can be very chatty across a network. WSUS clients will only report in to the settings you tell them to, every X hours. WSUS will also use BITS to transfer the patches to the clients, which will only use idle bandwidth. Also for a WSUS implementation the clients do not need to be on a domain, and there is no client install.
0
 
andrewm9199Author Commented:
Check this scenario:

1 WSUS Server at Main Site:
1000+ Clients at multiple sites using DSL.

Based on this scenario, WSUS would be best?
I'm looking to send out just "Critical" updates and "Forefront Client Security" updates..  Nothing else.

SCCM does cause alot of chatter.  I don't see any other way besides WSUS\BITS.
0
Increase Security & Decrease Risk with NSPM Tools

Analyst firm, Enterprise Management Associates (EMA) reveals significant benefits to enterprises when using Network Security Policy Management (NSPM) solutions, while organizations without, experienced issues including non standard security policies and failed cloud migrations

 
larry urbanDevOps EngineerCommented:
Absolutely! WSUS will also stager the client downloads so it won't be a network hit.
0
 
DonNetwork AdministratorCommented:
"Hundreds of remote sites each containing 1 XP Computer and 10 XP "

When you configure WSUS be sure to select "Do not store updates locally"

This way the computers will download from Microsoft(Thru their local Isp) rather than all over your WAN. Then you can also track their success/failures and control approvals.
0
 
LeeTutorretiredCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.