Windows 10 patches - is WSUS necessary?
We currently have a windows domain. When thinking about Patch management on the network and thru Windows 10, doesn't the OS automatically handle patches through the updates on each system? Is WSUS really necessary to push out patches, when the Windows 10 platform does a fine job on its own to apply updates?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
We have like 25 computers. So WSUS might be beneficial?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Pro WSUS:
-easy to setup
-easy to maintain if you only have limited products to patch (like only win10 and only office 2016)
-gives you control when updates are installed and which are installed, which is very important for example for feature updates
-gives you control to even uninstall updates that cause trouble
-works with addons like wpp to deploy and control even 3rd party updates
Against WSUS
-costs a server license
-is rather resource intensive, at least if you have multiple products to patch: lots of disk space, lots of IO, at least 6 GB RAM
-Win10 can save internet bandwidth even without WSUS since it by default shares updates inside the LAN between workstations
-needs certificates for SSL (required for secure usage)
-needs some hours each month for monitoring and accepting/declining updates and cleaning up
-easy to setup
-easy to maintain if you only have limited products to patch (like only win10 and only office 2016)
-gives you control when updates are installed and which are installed, which is very important for example for feature updates
-gives you control to even uninstall updates that cause trouble
-works with addons like wpp to deploy and control even 3rd party updates
Against WSUS
-costs a server license
-is rather resource intensive, at least if you have multiple products to patch: lots of disk space, lots of IO, at least 6 GB RAM
-Win10 can save internet bandwidth even without WSUS since it by default shares updates inside the LAN between workstations
-needs certificates for SSL (required for secure usage)
-needs some hours each month for monitoring and accepting/declining updates and cleaning up
The idea behind a WSUS server is that you don't want to have 10+ computers downloading the same content... (windows or office updates, patches,etc) you just want it to download once and distribute it over the network :)