Posted on 2011-05-03
Last Modified: 2013-11-21
We currently deploy all our microsoft security updates simply with a single WSUS server.  However we have a number of different sites with a mixture of slow and fast links.

I have been asked to put together the pros and cons of each.  Does anyone have a list of these,  I am already using sccm for a number of other things but need the  evidence to show that it would be better using sccm than leaving it up to WSUS?
Question by:WNottsC
    LVL 13

    Accepted Solution

    First of all, u have to make sure that u can't use WSUS and ConfigMgr SUP togather, so if you decide to use ConfigMgr SUP, you need to disable WSUS GP from applying on the clients, because ConfigMgr will copy setting to local policy and WSUS GPO overwrites the Local Policy of the SCCM Client.

    if you need help to decide which solution u need for software update (WSUS or ConfigMgr)?
    I prefer to check ConfigMgr SUP new features to understand what other options you can have in case you use SUP in ConfigMgr, Please check the following:

    SUP Overview:
    Providing updates to software and maintaining managed resources is a reality of networked, distributed computing. An effective software update management process is necessary to maintain operational efficiency, overcome security issues, and maintain the stability of the network infrastructure. However, because of the changing nature of technology and the continual appearance of new security threats, the task of effective software update management can be challenging.

    The Microsoft System Center Configuration Manager 2007 software updates feature provides a set of tools and resources that can help manage the complex task of tracking and applying software updates to client computers in the enterprise. Click any link in the following section for overview information about software updates.
    LVL 36

    Expert Comment

    by:Bing CISM / CISSP

    Author Comment

    Are there any big things that SCCM can do that WSUS (on its own) can not, and vise versa
    LVL 31

    Expert Comment

    - With SCCM you can define exaclty the time when installing updates.
    - Also it's very easy to build logical computer groups for which you can define specific update deployment settings.
    - You can handle the download behaviour if the remote location has a bad bandwith with SCCM
    LVL 13

    Expert Comment

    by:Abduljalil Abolzahab
    additionally, if you use Configuration Manager SUP:

    1- Provides visual workflows for software updates processes.
    2- Better reporting and checking for update setup status on the client machine.
    3- Inventory Tool for Microsoft Updates.
    4- You can use deployment templates.
    For more information about Configuration Manager SUP, you may check the following link:
    LVL 4

    Expert Comment

    LVL 47

    Expert Comment

    What I would do since you have some slower links is throttle BITS

    WSUS: How To Throttle BITS
    LVL 1

    Expert Comment

    On your slow links you can create secondary sites or Distribution Points to deploy the updates, and schedule those to only deploy to the site overnight.
    Also, SCCM gives you the option to wake-on-lan and deploy, which can be a big help to your success ratio.
    And if you use SCCM for imaging you can force install the updates as part of the imaging process.

    My general rule is if you have a 'simple', highly connected environment and don't need WOL, then stick with WSUS. In a highly distributed environment, I'd go with SCCM.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Are your corporate email signatures appalling?

    Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

    Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
    Remote Apps is a feature in server 2008 which allows users to run applications off Remote Desktop Servers without having to log into them to run the applications.  The user can either have a desktop shortcut installed or go through the web portal to…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now