Windows Server Update Services

But-

Well, and yeah, and, and admin gets n- IT gets no slack on that, right? If it doesn't work properly with WSUS and you depend on that, well, now you're in hell, right? Like, there's, there's lot, there's a whole other set of tools that the administrators need to run that nobody will have bandwidth for if they have any problems at all.

So they've gotta ...

They, they're careful for a reason.

What is the trap?

When you slide the Windows Update workload to Intune, you must manually go into the configuration manager client settings and explicitly disable the local software update workflow, the WSUS integration.

Why? What is happening on the endpoint if you forget to turn WSUS off?

You trigger a devastating looping conflict.

Intune tells the Windows endpoint, "Go to the Internet and download the latest patch directly from Microsoft." The device starts the download, but then the local SCCM agent wakes up, sees its active WSUS policy, and says, "No, stop that internet download.

You must scan against the local WSUS server." It kills the cloud download.

Ugh.

Intune sees the failure and triggers the download again.

This kind of indirectly ties into my News React item, and my News React item goes back to earlier this month, and that was Patch Tuesday for September, right? And, Paul, do you remember the days when Patch Tuesday would roll around and we would have 10 patches, 20 patches, maybe 50 patches on a bad week, a bad month? Andy,

I can remember, and I talk about this as well, so WSUS servers on the same physical network with cables...

Running patch up Windows updates on the machines and the updates going through.

Some were still failing on a physical network with the same cables on it.

In fa- that's this week's, the, the, this month's worth of shows.

I've, uh, last week with Adam, uh, we were talking about WSUS, which is sort- which, which is patch management, where you hold them and decide what you're gonna deploy and which ones you wanna deploy.

So-

Right

No

... and this is, this speaks to that.

And the, and this is, and this is also a product, and again, I talked about this last week, like Microsoft's deprecating SUS, uh, uh, WSUS.

They want it to go away.