Last Updated on 31 Aug. 2012, Company: Microsoft Corporation
Windows Server Update Services (WSUS) enables information technology administrators to deploy the latest Microsoft product updates to computers that are running the Windows operating system. By using WSUS, administrators can fully manage the distribution of updates that are released through Microsoft Update to computers in their network.
I have been using SUS to deploy windows critical patches and Service Packs to over 18,000 systems over the past 5 months. Using Active Directory GPO's to configure our client systems, one SUS server is able to handle all of our client systems.
SUS does not have a reporting system and once the patch is approved on the server, it is up to the client systems to pull that patch and install it. Clients can fail to install the patch for many different reasons but 95% of the clients appear to get patched successfully (no formal reporting to ensure successful patching). One advantage to SUS is that clients will get all relevant patches each time they poll the SUS server so any new systems that need multiple patches will get them within 24-48 hours.
This is a good product for helping to keep your systems patched but it lacks the full reporting and control capabilities to be acceptable as your primary patch management tool.