Topic > Patch Management - 741

Windows Server 2012 is dynamic software as it is constantly evolving. These improvements are available to users in the form of Windows updates and patches. The results of an audit can demonstrate that without proper monitoring our system can slowly become obsolete, less productive and potentially non-compliant with the government. Microsoft is constantly making improvements or fixing bugs through a series of updates. Some updates are very important to keep products like Windows Server 2012 current and secure. Other updates may be labeled Recommended or Optional by Microsoft. “Microsoft regularly releases security updates on the second Tuesday of each month, commonly known as Patch Tuesday” (Regan, 2013) Given the abundance and frequency of patches, it is important for our organization to manage them in an efficient and organized manner to maintain maximum levels of productivity while minimizing system downtime. Most home users are familiar with Windows Update and the basics of how it works. In a corporate environment like ours with 50 servers Windows Update is not effective as we would have to manage it on each individual server individually. Windows Update Management For our purposes using something called WSUS or Windows Server Update Services is the most appropriate vehicle in patch management. WSUS is included with Server 2012 and gives us the ability to manage updates for all of our servers in one place. There is another product called System Center Configuration Manager or CCM that could be used in place of WSUS and offers many of the same features. SCCM has an associated cost and doesn't offer enough reasons to make the investment, so in my opinion WSUS is the best fit for our organization... mid-paper... reasons for improvement. MMC has a feature called Performance Monitor designed specifically to monitor the types of performance indicators we should be looking for. Using WSUS allows us to implement a Windows Update management system that includes a process for updating and installing patches on a regular monthly basis as well as a process for testing those updates before rolling them out to all of our servers at company level. WSUS should become an integral part of our network management plan. Furthermore, MMC allows us to have granular control of our system's performance by monitoring servers through the Performance Monitor module. WSUS combined with MMC will provide us with the most up-to-date and efficient network we can imagine. Works CitedRegan, Patrick. (2013). Administering Windows Server 2012. Hoboken, NJ:John Wiley & Sons, Inc.