WSUS is a Windows Server Update Service, that allows the administrators to have a server with Windows updates on site. Administrators can test new updates and approve the successfully tested Windows updates for release. Only the approved updates will be applied to the client computers. Using Group Policy, the administrators can point client computers to WSUS server, so the client computers will only receive the tested and approved updates from this server, instead of receiving all the updates (including potentially harmful updates) from the Windows update web site. This assures, that none of the new Windows updates will create unexpected issues with the clients' systems. Using WSUS also conserves bandwidth, because all the client systems will
…show more content…
There will be no consistency between the sites, and the same work will have to be done multiple times by multiple groups of IT stuff.
2. As multiple synchronized WSUS servers configured in a parent-child relationship.
In my opinion this is a better approach, because approval lists and updates can be synchronized from the parent server to the child servers. Updates can be tested and approved at the main site and consistently distributed to the other sites. The relationship between the parent server and a child server can be implemented in autonomous mode or in replica mode: in an autonomous mode, the parent server acts like a Windows update to the child server, distributing all the updates to the child servers, but leaving the approval management to the child servers. This will effectively create similar situation as with the independent WSUS servers. One difference is, that the updates to the child servers will come from the parent WSUS server instead of from the Windows update. I would not recommend this implementation, because of the possible lack of the consistency in applying updates between the
There will be no consistency between the sites, and the same work will have to be done multiple times by multiple groups of IT stuff.
2. As multiple synchronized WSUS servers configured in a parent-child relationship.
In my opinion this is a better approach, because approval lists and updates can be synchronized from the parent server to the child servers. Updates can be tested and approved at the main site and consistently distributed to the other sites. The relationship between the parent server and a child server can be implemented in autonomous mode or in replica mode: in an autonomous mode, the parent server acts like a Windows update to the child server, distributing all the updates to the child servers, but leaving the approval management to the child servers. This will effectively create similar situation as with the independent WSUS servers. One difference is, that the updates to the child servers will come from the parent WSUS server instead of from the Windows update. I would not recommend this implementation, because of the possible lack of the consistency in applying updates between the