Posted on 2011-05-03
Medium Priority
Last Modified: 2013-11-21
We currently deploy all our microsoft security updates simply with a single WSUS server.  However we have a number of different sites with a mixture of slow and fast links.

I have been asked to put together the pros and cons of each.  Does anyone have a list of these,  I am already using sccm for a number of other things but need the  evidence to show that it would be better using sccm than leaving it up to WSUS?
Question by:WNottsC
LVL 14

Accepted Solution

Abduljalil Abou Alzahab earned 2000 total points
ID: 35510628
First of all, u have to make sure that u can't use WSUS and ConfigMgr SUP togather, so if you decide to use ConfigMgr SUP, you need to disable WSUS GP from applying on the clients, because ConfigMgr will copy setting to local policy and WSUS GPO overwrites the Local Policy of the SCCM Client.

if you need help to decide which solution u need for software update (WSUS or ConfigMgr)?
I prefer to check ConfigMgr SUP new features to understand what other options you can have in case you use SUP in ConfigMgr, Please check the following:

SUP Overview:
Providing updates to software and maintaining managed resources is a reality of networked, distributed computing. An effective software update management process is necessary to maintain operational efficiency, overcome security issues, and maintain the stability of the network infrastructure. However, because of the changing nature of technology and the continual appearance of new security threats, the task of effective software update management can be challenging.

The Microsoft System Center Configuration Manager 2007 software updates feature provides a set of tools and resources that can help manage the complex task of tracking and applying software updates to client computers in the enterprise. Click any link in the following section for overview information about software updates.
LVL 37

Expert Comment

ID: 35510657

Author Comment

ID: 35511828
Are there any big things that SCCM can do that WSUS (on its own) can not, and vise versa
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

LVL 31

Expert Comment

ID: 35512639
- With SCCM you can define exaclty the time when installing updates.
- Also it's very easy to build logical computer groups for which you can define specific update deployment settings.
- You can handle the download behaviour if the remote location has a bad bandwith with SCCM
LVL 14

Expert Comment

by:Abduljalil Abou Alzahab
ID: 35674740
additionally, if you use Configuration Manager SUP:

1- Provides visual workflows for software updates processes.
2- Better reporting and checking for update setup status on the client machine.
3- Inventory Tool for Microsoft Updates.
4- You can use deployment templates.
For more information about Configuration Manager SUP, you may check the following link:

Expert Comment

ID: 35745235
LVL 47

Expert Comment

by:Donald Stewart
ID: 35794721
What I would do since you have some slower links is throttle BITS

WSUS: How To Throttle BITS


Expert Comment

ID: 35894148
On your slow links you can create secondary sites or Distribution Points to deploy the updates, and schedule those to only deploy to the site overnight.
Also, SCCM gives you the option to wake-on-lan and deploy, which can be a big help to your success ratio.
And if you use SCCM for imaging you can force install the updates as part of the imaging process.

My general rule is if you have a 'simple', highly connected environment and don't need WOL, then stick with WSUS. In a highly distributed environment, I'd go with SCCM.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Case Summary: In this Article we introduce the new method to configure the default user profile using Automated profile copy with sysprep rather than the old ways such as the manual copy of a configured profile to default user profile Old meth…
Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
Loops Section Overview
Suggested Courses

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question