Microsoft Windows Server Update Services Reviews

In my company, we have dedicated servers for our project, so we used to do the compliance on those servers, and we had to patch them using Intune. Recently, my company started using ManageEngine Desktop Central for some of the projects. Users have to keep the tool updated to the latest versions.

The most valuable feature of the solution is that it is easy to use.

It offers a friendly UI, so my company does not have to do the coding every time one wants to use the device. It is feasible for our company to use the product. If you have to perform any operations anywhere, you don't have to open the command prompt and run the command. There are features like PowerShell and batch scripting, but those are for the server part.

The current versions offered by the product are really great. I like to work on them.

The product's most critical features for maintaining the security and compliance of our company's systems stem from the security updates provided by the solution. Microsoft Defender and some of the other firewall products can be considered some of the most critical services offered by Microsoft Windows.

The product lacks to offer some of the features offered by some of the open source solutions like Linux and others, making it an area where improvements are required. I feel that the product's scalability can be improved.

I have been using Microsoft Windows Server Update Services for three years.

Stability-wise, I rate the solution a ten out of ten.

Scalability-wise, I rate the solution a nine to ten out of ten.

The product's initial setup phase is straightforward, and there is no need to get involved in complex operations. You just have to select the partition, install the OS, and do a few clicks, after which the product gets installed, and you are able to work on it.

The solution can be deployed on either the cloud or on an on-premises model since both are easy.

For my home appliances, I have to make certain payments to use the product. In my company, there is a team that takes care of the licensing part associated with the tool.

I recommend the product to those who plan to use it.

I rate the solution a nine out of ten.

We have Microsoft Windows Server Update Services in place to deploy standard Microsoft updates. It does not allow us to update or patch other products, which is a limitation. We use it for the deployment of updates without additional costs.

Microsoft Windows Server Update Services allows us to deploy updates efficiently at no additional cost.

The most valuable feature of Microsoft Windows Server Update Services is its low cost, as it requires no additional licensing fees.

There are several areas needing improvement, including the management of third-party patches, better enforcement of patch deployment on user PCs, and the ability to schedule updates at specific times. If these areas were improved, Microsoft Windows Server Update Services could be more competitive.

We have been using Microsoft Windows Server Update Services for more than ten years since it was in place when I joined the company.

Microsoft Windows Server Update Services is very stable and does not require special maintenance.

I do not have much experience with its scalability since our company size has not changed significantly, but it's easy to deploy additional servers if needed.

We have not needed to contact Microsoft's customer service as the available documentation is comprehensive and helpful.

Positive

We previously used Microsoft Windows Server Update Services and are now exploring Qualys for its added benefits, like a more comprehensive approach to vulnerability management.

The initial setup of Microsoft Windows Server Update Services was straightforward and uncomplicated.

One person can deploy Microsoft Windows Server Update Services; it does not require a team.

Since Microsoft Windows Server Update Services is free, we do not have any additional operational impacts, and there are no additional costs incurred with its use.

Our experience with Microsoft Windows Server Update Services involves no setup cost or licensing fees, as it is included with our existing licenses.

I did not participate in the evaluation process for choosing Qualys, and therefore do not know what other options were considered.

I'd rate the solution seven out of ten.

I use the tool to update the main servers. 

The tool's most valuable feature is Active Directory. 

The challenges exist according to the planning. For example, if you plan to implement and apply updates to your infrastructure, including servers and clients, you must provide storage information and have a clear plan for that from start to end.

You need to define the space needed to download all the information, how to implement and apply it to your network, the deadline, and what to do with outdated data. For example, if something was downloaded now but isn't needed after a year, you must delete it. This is not an easy task. You must have some information, education, and training about this. If done correctly, everything will work perfectly.

I rate the Microsoft Windows Server Update Services' stability a ten out of ten. 

The solution is scalable. The number of users using Active Directory depends on the company. In my opinion, it is recommended to use it if you have at least around 20 users.

Setting up the tool requires knowledge. It's not as simple as installing a client or an operating system. You need some education and understanding before implementing and setting it up.

I remember some steps for deploying the tool, but not all of them. You must have some knowledge about Active Directory and its procedures. You need to install the prerequisites, such as a DNS server. Sometimes, you will install it while installing Active Directory services on the Windows role. You must know the domain name and whether it is the first domain or a subdomain. You need this information before you start the setup.

You must expose your infrastructure to the internet, ensuring each server or client can use your internet bandwidth to download updates. By downloading updates to one point and then distributing them to all clients and servers from there, you minimize unnecessary traffic.

Without this central point, each client would download updates independently, increasing costs and traffic. The most valuable benefit is downloading updates once and applying them across all clients and servers in your infrastructure.

You can manage daily users for administration, user, and domain policies. For example, how many days before you must change the password, how many characters the password must have, and the complexity of the password. These policies can be implemented and defined before being used for reports. If I remember correctly, there are no specific reports for this. You can see what policy is implemented and applied in your infrastructure. For example, you can trace and monitor users in the Windows events log.

I rate the overall solution a ten out of ten. 

The primary use case is for managing the distribution of updates within a corporate environment. However, SCCM remains the major tool for patching.

In the current era of heightened cybersecurity concerns, ensuring that your systems are consistently updated and well-protected is imperative. This solution becomes particularly crucial for services accessible to the public, especially those exposed to the internet—a condition that is increasingly prevalent for most entities today. It stands as one of the essential measures for safeguarding against potential cyberattacks.

The noteworthy aspect is the system's capability to handle an extensive range of services and workloads, with the potential for almost unlimited scalability.

One area for potential improvement involves the administrative portal, where numerous options, including asset management and patch management, are integrated. There's a suggestion that decoupling these integrated tools might be beneficial. This decoupling could involve separating services or options to provide more flexibility and potentially reduce costs, allowing for a more modular approach to the utilization of these tools.

I have been using it for approximately twenty years.

The system is notably robust, particularly when utilized with Microsoft products. The stability is high, and it could be rated around eight out of ten.

Scalability, particularly with the integration of cloud services, is notable. In the cloud environment, scalability is essentially bound by your budget—expanding resources as much as you're willing to invest. On-premises, however, scalability involves purchasing additional subscriptions and compute resources before increasing the number of servers, introducing a more upfront and structured approach to resource expansion.

Technical support needs to be organized into different levels, starting with frontline support and extending to backend support. For the backend, a team of around four individuals is typically required to effectively manage those responsibilities.

The initial setup of the system is complex. It requires the expertise of an individual who can set up and comprehend the intricacies involved. Even after installation, the configuration of processes, services, and other elements necessitates specific attention and configuration.

Deploying the system requires the assistance of an expert, especially if you are not familiar with its nuances. The application is comprehensive, covering various aspects, and demands expertise in specific configurations for accurate setup.

The licensing cost is a component of the enterprise services associated with Microsoft. Given the multitude of features within the solution, it tends to be on the higher side in terms of expenses. While it might be relatively more expensive for smaller companies, larger enterprises can find it robust and capable of delivering significant value.

I would suggest to evaluate your environment, analyze specific use case scenarios, and weigh the benefits the system provides. The suitability of this solution varies depending on the size of the organization. Overall, I would rate it eight out of ten.

We can use the tool monthly to make updates concerning security and other things.

The tool has only one feature, which is updates. 

Microsoft Windows Server Update Services needs to improve its reporting feature. The tool's competitor has better reporting capabilities. 

I have been using the product for 15 years.

Microsoft Windows Server Update Services is scalable. My company has around 1000 systems. 

Microsoft Windows Server Update Services deployment is easy. You must go to the Windows features and configure the system. Then, you can install the updates. Once installed, you can start configuring the required settings. All these configurations are straightforward and can be set up in the Windows Update System Server console. Once it is set up, it downloads all the updates from Microsoft. It will then deliver the updates to the system based on our policies and rules.

The solution's deployment can be done in-house. 

We need one single key for Windows deployments, which is a better option. Buying a license with the same key for all systems, like Windows and Windows Desktop, makes configuring easier. Otherwise, it isn't easy to manage multiple keys for different systems.

You can get the tool as a default feature in Windows. You can manage everything from one single place using WUSS. It's free and comes with Windows, but you must buy a license. I rate the overall product a seven out of ten. The solution requires people with experience in systems. 

As a system administrator at my organization, I use Microsoft WSUS to manage the updates for all the Microsoft products that we are using. Since WSUS is a service that handles the Microsoft updates and their deployments to a group of servers, you could technically call it patch management software.

Just like IIS, it comes built-in with the version of Windows Server that you are using, and we are currently using WSUS on Windows Server 2022 to efficiently manage the updates on all the other servers in our organization.

When you're working in the IT department of an organization, you will often have to set policies regarding what users can and cannot download from the internet, especially when it comes to updates. Most updates are binary files and programs, and these are types of files that can sometimes be harmful, so an organization needs a way to prevent the downloading of these files.

Instead of leaving each server to download their own updates, with WSUS you have a centralized management tool for all the updates alongside a log for all the servers. By creating and deploying a WSUS server that will download the updates from the internet and dispatch them to the other servers, you can have control over the entire deployment process.

Essentially, it's like a Windows Update proxy that you absolutely need to have, as the IT department grants the WSUS server an exception to download files of any type from the internet. This is the only server with such an exception so that you can control what is entering or exiting the network with regard to updates.

The advantage that is offered by WSUS is not only that you can manage all updates (e.g. critical updates, essential updates, feature updates, driver updates, etc.), but also that you can manage the updates per type of operating system; for example, Windows 10, Windows 11, Windows Server 2022, Windows Server 2019, and so on. It provides you a way to create classifications of types of updates per type of operating system. And all this, you can do from a single management console.

The main problem with WSUS is that the management console doesn't allow you to do a lot of operations. It's actually quite a primitive console, and has been since day one. In order to be more effective, you need to use another tool from Microsoft that can take advantage of WSUS and also offer you the extra features you need.

For example, SCCM (System Center Configuration Manager) is software from Microsoft that uses WSUS and gives you many more features than you would get from using WSUS alone. To truly manage the updates of your entire environment effectively, you either need to automate the features you need with PowerShell scripts or you need to use SCCM.

To illustrate one particular limitation of the basic WSUS management console, when you download updates with classifications per operating system, sometimes it doesn't offer you a good way to display or regroup updates that are part of a specific group. Or, as another example, if you just want to see the latest updates, the WSUS console will simply show you all the updates that are available. Microsoft uses an updating process whereby each new update will supersede the previous one, meaning it will expire the old updates, but the management console doesn't offer you a way to regroup or display only the new updates while excluding the ones that have expired. This is one of the many management features that are missing from the WSUS console.

One other area of improvement is that when you want to add servers to use WSUS, you can't easily add or search for a server. To add a server into the management console, you need to do other things and wait until the check cycle starts, meaning that you need to wait for a while until you see the newly-added server that will be handled by the WSUS server.

We started using Microsoft WSUS in 2015, although after a few technical problems we stopped using the service because it was causing us a lot of trouble. Later, in 2022, I redeployed a server that we now use to manage the updates for all the Microsoft products that we are using.

As one of the administrators for our WSUS server, I would say that it is very stable.

Regarding the scalability, you can actually configure something of an ERP version of the WSUS service. For example, if you work in a company that has multiple sites and these sites are located in other states or countries, you can deploy WSUS for each site. Once you've done that, these WSUS servers will all communicate with a parent WSUS server that will then deploy updates to each child WSUS.

Therefore, I'd say that WSUS is quite scalable since we can make servers communicate with one another, in the sense that you have one parent source that communicates with and deploys updates to each child WSUS service in a hierarchical arrangement.

My rating for WSUS would be the same rating I would give the overall technical support from Microsoft, and it all depends on the criticality of the incident. Microsoft will sometimes call you within 24-48 hours depending on the urgency of your request, and most of the time, Microsoft support does a good job.

We haven't used any other solution for this type of process as there are no other products that offer the same service, because Windows Update is part of the Windows Server operating system. It is like a black box that nobody knows anything about and you aren't provided with any tools that can offer the same job that the WSUS server does.

Setting up WSUS is quite easy, but the installation itself is just a feature you can enable in your server. If you really want to use it well, you need to do extra configuration tasks, not only in the WSUS server but also in the Active Directory server. You will typically have to create a few network group policies and other configurations in addition to setting up WSUS itself.

I was responsible for deploying our current WSUS server, but we are still in the testing stage. We haven't yet deployed WSUS to be used in a production environment at all, since we are still adding in servers one by one, testing everything as we go along.

The licensing of WSUS is free of charge because it comes with the Windows Server operating system, included as a feature of the operating system itself. It's simply a role that you enable within Windows Server. Technically, we are only a customer of Microsoft and not a customer of WSUS.

For example, if your license for the Windows Server 2022 operating system costs, let's say, $400, then this license will include WSUS and all the other features of the Windows Server operating system (like IIS, etc.). So, ultimately, to speak of the licensing of WSUS, you have to refer to the price of the server license and what kind of contract you have with Microsoft. If you rent, it's a rental license contract, or otherwise you might go with a volume license contract.

Suppose a corporation wants you to buy a number of licenses, and you opt for a group of individual licenses at a price of, for example, $200 per license. If you want to deploy 50 servers, you will need to buy 50 licenses. This method of licensing is very expensive and it will cost far too much to be reasonable. That's why Microsoft offers what are called "volume license" packages.

With volume licensing, Microsoft gives you a discount if you buy a large number of licenses. But with the volume type of licensing, you are not able to get upgrades for the next version, such that if you currently have Windows 10 or Windows Server 2019, you can't upgrade to Windows 11 or Windows Server 2022, respectively. Although these licenses are perpetual, you will be stuck with the same version.

The better option is to go for a rental contract, which means that you merely rent a certain number of licenses each year, and these licenses won't expire unless the contract expires (at which point you lose access to the portal where you can download operating systems and other applications along with their licenses). Importantly, these licenses give you the ability to do upgrades from one version to another. For as long as you are on a rental contract, you will pay an amount of money depending on the type of software you want to rent (e.g. Windows Server, Microsoft SQL Server, Windows 10, Windows 11, Office 365, Visual Studio, etc.), and you will always be able to upgrade from one version to another.

This is just a basic overview of the licensing models from Microsoft; the details are much more complicated.

One piece of advice I can give is that it's important to acknowledge that, sometimes, updates can bring their own problems. For example, when you install an update, you need to wait until the computer restarts, and in some cases updates can cause the computer to crash. The crash may even be so severe that you need to reformat the machine and, thus, you lose your data.

When talking about other administrators who are wondering about whether to use WSUS, I can confirm that it's a very good tool. And, if you're also using SCCM, WSUS is even better because SCCM will give you a lot of features that are not provided by the basic version of WSUS.

If you want to deploy updates with WSUS, you must remember that it's always best to deploy only the security updates and critical updates that are recommended by Microsoft, because other types of updates such as essential updates, driver updates, and feature updates can sometimes cause instabilities in the system.

And sometimes these extra updates can cause problems with other products. For example, you can sometimes disrupt another product from Microsoft by installing an independent system update that will cause, for example, the mailing service to malfunction. You always need to be sure to do backups of the servers before using WSUS to perform updates.

Finally, there are a few other things that you will need to know in order to run an effective WSUS server, such as how to work with Active Directory. With Active Directory, you can more easily configure which servers will use the WSUS and which ones will not. For example, if you want the servers to perform updates through WSUS, you need to set this option in the Active Directory server. If, instead, you want the leave the computers to get their updates from the internet directly, you will also need to set this up in Active Directory. To do all this, you need to have at least a minimum amount of knowledge in creating group policies, security policies, and so on.

I would rate Microsoft WSUS an honest eight out of ten, because even though some of the features are lacking, it handles the basic stuff very well.

We use the solution for the internal server. We use the tool to push Windows updates to the computers. It is mainly for internal patch management. We use the tool to manage updates across different server environments.

We can track the updates of the PC and servers. The reporting features are good. The testing and reporting processes are better than those of other tools.

The policies must be made easier. The tool must allow users to update the policies. Currently, we can only create policies and update a few things in them. The product must provide more functions. The approval process must be improved. Currently, it is a very simple process. We just approve security updates and critical updates. Other vendors have better approval processes.

I have been using the solution for many years.

I rate the tool's stability nine out of ten.

I rate the tool's scalability eight out of ten. Most of the time, we have only one server for the whole organization. We have 500 computers.

The support is very good.

Positive

The deployment process is very straightforward and easy.

The price is medium. The tool could be cheaper.

We recommend the tool to our customers unless they specifically require a different solution. Overall, I rate the product a seven out of ten.

We use the product to manage patch updates for servers.

The platform’s dashboard and reporting features need enhancement.

We have been using Microsoft Windows Server Update Services for 15 years.

I rate the platform’s stability an eight out of ten.

We have 400 Microsoft Windows Server Update Services users in our organization. It is a scalable platform. We never had any issues related to scalability.

The technical support team could have extensive knowledge about the application.

Neutral

The initial setup is straightforward. We began by thoroughly reviewing the installation manual to gain a clear understanding of the prerequisites and requirements for the application. We started preparing servers and integrations, followed by deploying the agent across all machines to centralize management through WSUS. It takes time to understand specific criteria to be deployed automatically.

We implemented the product ourselves.

The implementation of Microsoft Windows Server Update Services (WSUS) has significantly improved our patch management process by shifting our approach from reactive to proactive. We can automate the process instead of relying on manual methods.

The platform provides good value in terms of time and effort by eliminating the need for manual patch management. It gives us more time to concentrate on other aspects of the project.

We encountered a few technical issues with the application related to deployment agents and operating system compatibility. We were able to overcome the challenges by escalating the case to the engineers.

I recommend the product to others as it is an easy-to-use patch management or deployment monitoring system. It is the best solution for all business use cases. However, I advise others to understand their business requirements before making the purchase decision.

I rate it an eight out of ten.