Deployiong Windows Updates to Remote Sites over slow links

What is the best method iof distributing "managed "Windows XP Critical Updates to Hundreds of remote sites each containing 1 XP Computer and 10 XP Embedded Systems?
When I say managed, I mean either using SCCM or WSUS.

Remote Sites have DSL or T1's.

Any feedback\suggestions would greatly appreciated.
andrewm9199Asked:
Who is Participating?
 
larry urbanConnect With a Mentor DevOps EngineerCommented:
I like WSUS and set the time update time for 1 am. if you use SCCM you will just be installing WSUS on-top of it anyway. it is easier to just use WSUS and it uses less bandwidth than the SCCM. Also, SCCM would have to have a remote server on each location where the WSUS will just receive queries for updates.
0
 
techjunkyjoshConnect With a Mentor Commented:
Like Todar stated SCCM uses WSUS for Windows updates. I would go with a stand alone WSUS server and not use SCCM at all. SCCM can be very chatty across a network. WSUS clients will only report in to the settings you tell them to, every X hours. WSUS will also use BITS to transfer the patches to the clients, which will only use idle bandwidth. Also for a WSUS implementation the clients do not need to be on a domain, and there is no client install.
0
 
andrewm9199Author Commented:
Check this scenario:

1 WSUS Server at Main Site:
1000+ Clients at multiple sites using DSL.

Based on this scenario, WSUS would be best?
I'm looking to send out just "Critical" updates and "Forefront Client Security" updates..  Nothing else.

SCCM does cause alot of chatter.  I don't see any other way besides WSUS\BITS.
0
Simple Misconfiguration =Network Vulnerability

In this technical webinar, AlgoSec will present several examples of common misconfigurations; including a basic device change, business application connectivity changes, and data center migrations. Learn best practices to protect your business from attack.

 
larry urbanDevOps EngineerCommented:
Absolutely! WSUS will also stager the client downloads so it won't be a network hit.
0
 
DonConnect With a Mentor Network AdministratorCommented:
"Hundreds of remote sites each containing 1 XP Computer and 10 XP "

When you configure WSUS be sure to select "Do not store updates locally"

This way the computers will download from Microsoft(Thru their local Isp) rather than all over your WAN. Then you can also track their success/failures and control approvals.
0
 
LeeTutorretiredCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.