For a larger company, implementing Windows Server Update Services (WSUS) is highly favorable. WSUS provides the server-side component to handle updates, provided by Microsoft. Relying on each user to manually update their Windows can be time-consuming and risky, as they can forget to do so or ignore it all together. Due to the always rising number of security threats and new updates and hot-fixes, Windows must always remain up-to-date. Failing to do this can have drastic consequences such as being infected with a new virus, thus creating expensive repairs. With WSUS, the hotfix that was released to protect against that new virus would have been installed on the computer before any damage was done. WSUS also does not cost anything to install, making it ideal to save on time and money.
The one potentially troublesome aspect of updating many Windows operating systems, especially for a large company, are administrative and group policy settings. To install updates, the user might be required to have administrative rights, thus preventing them from keeping Windows up-to-date. However, many do not want their employees to all have administrative rights due to the problems that can arise; a large company would suffer even more from this.
By using WSUS, computers would be directed to the WSUS server to receive updates by way of group policy settings. Using WSUS will allow updates and hot-fixes to be delivered to all computers, and with a larger company, this is crucial in maintaining a secure and productive workplace. WSUS also gives you the ability to specify groups of computers that will receive the same updates, something that Software Update Services (SUS) couldn’t manage.
For a large network, a hierarchy of servers would be ideal as it will give administrators the ability to direct which clients will use which servers. WSUS offers enhanced flexibility and greater security by ensuring that all computers are kept up-to-date and ready to protect themselves against malicious content, as well as work with newly released programs and updates.
Moskowitz, Jeremy. (2005). Patch Management. Retrieved from .