Subscriptions to Patches for Windows site

Usage and Config Patch
1

(imported topic written by SystemAdmin)

Hi All,

The security group is wanting to subscribe all systems to the “Patches for Windows” site to confirm all systems are up to date. I have been trying to tell them that we should just be checking what patches have been chosen to use. Now I see their point that they want to confirm everything, but now I am sitting here with almost 15k computers checking 5,500+ fixlets. This to me seems very “expensive” for probably no gain.

What are others doing out there? Are you subscribing all computers (or all Windows) to the Patches for Windows site, or just checking based on a custom site?

Thanks

Martin

2

(imported comment written by cstoneba)

we subscribe all our win servers (~5000) to the “Patches for Windows” and “Updates to Windows Applications” sites, That way, we can find out what fixlets they need, otherwise, you don’t know.