Windows 10 patches - is WSUS necessary?
We currently have a windows domain. When thinking about Patch management on the network and thru Windows 10, doesn't the OS automatically handle patches through the updates on each system? Is WSUS really necessary to push out patches, when the Windows 10 platform does a fine job on its own to apply updates?
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
We have like 25 computers. So WSUS might be beneficial?
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Pro WSUS:
-easy to setup
-easy to maintain if you only have limited products to patch (like only win10 and only office 2016)
-gives you control when updates are installed and which are installed, which is very important for example for feature updates
-gives you control to even uninstall updates that cause trouble
-works with addons like wpp to deploy and control even 3rd party updates
Against WSUS
-costs a server license
-is rather resource intensive, at least if you have multiple products to patch: lots of disk space, lots of IO, at least 6 GB RAM
-Win10 can save internet bandwidth even without WSUS since it by default shares updates inside the LAN between workstations
-needs certificates for SSL (required for secure usage)
-needs some hours each month for monitoring and accepting/declining updates and cleaning up
-easy to setup
-easy to maintain if you only have limited products to patch (like only win10 and only office 2016)
-gives you control when updates are installed and which are installed, which is very important for example for feature updates
-gives you control to even uninstall updates that cause trouble
-works with addons like wpp to deploy and control even 3rd party updates
Against WSUS
-costs a server license
-is rather resource intensive, at least if you have multiple products to patch: lots of disk space, lots of IO, at least 6 GB RAM
-Win10 can save internet bandwidth even without WSUS since it by default shares updates inside the LAN between workstations
-needs certificates for SSL (required for secure usage)
-needs some hours each month for monitoring and accepting/declining updates and cleaning up
Windows OS
This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.
129K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
The idea behind a WSUS server is that you don't want to have 10+ computers downloading the same content... (windows or office updates, patches,etc) you just want it to download once and distribute it over the network :)