I have a question that I’m looking into for my day job, which is how to manage server patches for our organization.  I have used WSUS all the way back to when it was just SUS.  I’ve also somewhat looked at a few 3rd party applications that do this same thing.  We currently have a SCCM server, which is what Microsoft implemented for patching inside of their datacenter   It’s a very powerful solution and has a lot of flexibility, but not sure that’s needed in our situation.

We currently have about 75 to 80 servers and as of right now, there’s not a lot of differences between what servers get what patches.  That may change in the future, as well as maybe needing to do more custom service stopping and starting as we find issues with patch cycles rebooting servers.

So what is everyone else using and what does everyone recommend?  Thoughts?