Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
Third-party Patch Management with WSUS|SCCM

Third-party Patch Management with WSUS|SCCM

Written By Vidya M A
Last Updated July 19, 2024
Posted In Manage Engine
SHARE

In this post, let’s see Third-party Patch Management with WSUS.

When Microsoft Intune was introduced, many feared that this would end Microsoft System Center Configuration Manager (SCCM) as the IT industry moved towards being completely cloud-based.

However, with the announcement of Microsoft Endpoint Manager, a solution that merges SCCM and Intune, Microsoft has ensured that SCCM’s functionalities are here to stay.

If this development doesn’t matter much to you, there’s a good chance you’re relying on simpler, less complex freeware—Windows Server Update Services (WSUS)—to carry out your day-to-day patch management tasks.

Index
WSUS and SCCM Relationship Status: Complicated
Third-party patch management in WSUS
Third-party Patch Management with WSUS|SCCM – Table.1

Related Post – Future of SCCM ConfigMgr Intune Admin Jobs

What is the Difference Between SCCM and WSUS?

WSUS and SCCM are both patch management solutions offered by Microsoft. Despite being legacy solutions, they share many commonalities and focus primarily on Windows OS and Microsoft products. SCCM and WSUS also have differences. They are:

WSUS
WSUS (Windows Server Update Services) is a free tool with hidden costs, such as troubleshooting time and the need for alternative patching tools for non-Windows systems and third-party applications.

When configured correctly, Microsoft’s WSUS should seamlessly patch Windows systems, minimizing manual effort for Microsoft-based networks.

WSUS has limited capabilities for patching third-party applications and lacks reporting and network visibility, making it unsuitable for much else.

SCCM
SCCM, or System Center Configuration Manager, is a paid patch management solution from Microsoft. It relies on WSUS to check for and apply patches but offers more control over patch deployment. However, there are still challenges when using SCCM for patch management.

SCCM controls patch deployment, report generation, and Windows machine management. It also offers endpoint protection and seamless integration with Windows systems and Microsoft products.

Hybrid infrastructure requires manual patching with SCCM, and third-party application patching is challenging. SCCM provides limited support for third-party apps, frustrating IT managers. Better third-party application management is a top request from IT staff due to the high vulnerability of third-party software on average PCs.

WSUS and SCCM Relationship Status: Complicated

Patching is the very first step in securing any enterprise network. In addition to that, patching makes software fast, efficient, and stable. Many vendors provide end-to-end patch management, and Microsoft is at the top of the pyramid. It offers three ways to patch Windows systems:

  • Windows Update: A service for non-enterprise users to receive automatic bug fixes and updates.
  • WSUS: Centralized patch management freeware built into Windows Server.
  • SCCM aka Microsoft Endpoint Configuration Manager (MECM): A complete system management solution that includes patch management, software deployment, etc.
Patch Management with WSUS
Third-party Patch Management with WSUS|SCCM – Fig.1

Of these three offerings, SCCM might seem like a sensible choice for an enterprise, but there’s a catch: SCCM uses WSUS’ infrastructure to perform patch management operations.

So, if you don’t need the additional features that SCCM offers, it’s wise to stick with WSUS for free patch management.

Third-party patch management in WSUS

WSUS is a simple, efficient, and reliable solution that provides centralized management of all Microsoft updates in your enterprise at no additional cost. But is everything rainbows and butterflies with WSUS? Not. WSUS has one major drawback: it doesn’t support third-party patching. 

WSUS third-party patch management streamlines the process of publishing non-Microsoft updates to the update server and deploying them to specific systems in the network. This enables the seamless availability of third-party patches through the WSUS console using specialized publishing tools.

With cyberattacks increasingly targeting third-party applications, failing to patch their vulnerabilities can be a real threat to any enterprise.

ManageEngine Patch Connect Plus has recently introduced a feature that enables the deployment of third-party patches directly through WSUS without the need for an SCCM infrastructure.

Patch Connect Plus is a comprehensive tool for third-party patch management. It offers automated third-party patching, customized deployment with pre- and post-scripts, detailed deployment reports, and support for over 350 third-party applications.

Its reliability and ease of use make Patch Connect Plus the perfect partner for WSUS. Start your 30-day free trial Patch Connect Plus now!

Resources – Patch Management

We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.

Author

Admin

Written by

About Author - Vidya is a computer enthusiast. She is here to share quick tips and tricks with Windows 11 or Windows 10 users. She is also keen to find solutions to day-to-day tech problems and write about them.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Simplifying Intune application management using ManageEngine Patch Connect Plus

Simplifying Intune application management using ManageEngine Patch Connect Plus is the topic we will cover in this post. As enterprises are increasingly moving towards cloud-based business solutions to manage their daily business operations, their enterprise security is following suit. Reports expect the global cloud security market to grow at 22.5% CAGR between 2022-2032 and is […]

VM Vidya M A 5 min read