We help IT Professionals succeed at work.

Overview of managing Updates

J G
J G asked
on
Recently someone suggested to me to manage Windows Updates in my organization using a WSUS server, SCCM and powershell patch audit utility.   Before the person suggested this this to me I thought I would manage updates using 1 of the 3 above, not all three.  I am familiar with WSUS, and powershell patch audit utility.  

 Could someone provide me with a top-level breakdown of how these components work together?  
Or... can you suggest your preferred method?
Comment
Watch Question

WSUS Server -> Patch Proxy server (kinda)
SCCM -> Push updates
powershell patch audit/Install -> pull updates / check installed updates

At least what I understand. What is wrong with only using WSUS Server?
David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019

Commented:
SCCM uses WSUS  as one of its components.  You don't configure WSUS as SCCM just uses it.
J G

Author

Commented:
What does the SCCM do in terms of updates that WSUS does not?
David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019

Commented:
installing configuring and managing sccm for less than 1000 users is counter productive.
J G

Author

Commented:
just to clarify, 1000 users? or 1000 workstations.  The organization I work for has about 850 workstations.
David Johnson, CDSimple Geek from the '70s
Distinguished Expert 2019

Commented:
Both actually. as each device can have several users or users can use several devices. It has changed its name to Endpoint manager but either way it is a central solution to installing updates, software to company machines.
WSUS's job is simply to provide updates so its learning curve is a lot less than the many functioning sccm.