Patch Management - Windows 8.1

[CyBeRkId2002]

Hi all,

 

Just wanted to check whether my logic was sound.

 

We are looking at the most efficient way of keeping Windows 8.1 patched and up to date using SCCM. I have created an update group and manually placed in the Monthly Security Update Rollup, which I believe will patch it with every security update so far. I have then created an ADR to get 'Security Only' updates which should pull the smaller file of just updates for the current month.

 

Am I right in thinking these two together cover all security needs?

 

What do others deploy?

 

Michael

[CraigM]

I use WSUS on it's own to patch Windows 7, Server 2012 R2 and Windows 10 clients, as well as Office products. Once set up it mostly does its own thing and keeps the clients up to date. The move to cummulative patching from Microsoft's side has helped cut down on the number of patches, but for Windows 7/8 I don't think it's included every patch ever released yet, so you'll need to apply more than one update.