How effective is WSUS from blocking “forced” WinX patches on a domain?
I am very new to patch management and my boss hates WSUS. I contacted 4 patch management vendors and only one claims their solution in combination with WSUS was successful at delaying patches being forced onto client PCs. They were cautious to state “at this time” as MS may pivot at any time, which might not be in our favor.
Perhaps I asked the wrong questions to the vendors.
If WSUS can delay forced updates for 30 days, perhaps MS can stabilize them and we can install them post beta test on the public. My fear is that even with a “correctly configured” WSUS instance, MS can choose to ignore our defenses and force feed patch defects breaking our systems.
Does WSUS provide adequate protection? Does a WSUS best practices guide exist? Are you happy with your current patch management add-on vendor? Is stand along WSUS enough?
Thanks for assisting with our learning curve.
