I’m working on a solution to automate patching baselines, which should help solve some of these issues.
Right now I am focused on the case of Windows OS patches only and will expand from there once that gets refined a bit.
So here is the idea:
You have 1 and only 1 patching baseline for Windows Patches. This baseline gets stopped and a new one gets created every week. It automatically includes all currently relevant Windows Patch tasks to at least 1 computer in the environment.
The reason you don’t need to keep around old baselines to “catch up” older machines / images that come online, is because the next time the patch baseline is generated, it will automatically include all of the patches those machines are missing, so they will get patched on the next cycle automatically anyway.
###Related: