How do you manage windows updates for your servers at work?

[jaybee]

We have approximately 200 windows 2003 Servers and we have an internal WSUS server setup. I do not know a lot about this, but I gather that WSUS is specifically designed to filter/rollout and coordinate updates to all servers rather than the servers just get update after update as if they were connnected to the internet. I know it can have different settings applied to auto install or to just download them.
How do you manage it at work with your servers?

I've worked at one place where it was very strict and very coordonated to only over occasionally install critical updates. But where I am at currently its the complete opposite and the servers may as well be getting the direct from the net they arent filtered at all.

When do you do reboots if at all? How often and how many updates get applied?

Boring subject but thought I would ask. As applying manually to 200 servers is poor.

 

[Burnsy2023]

WSUS is great. Filtering of updates is farily lax, most updates are approved. They get applied every week or so and reboots are done on the weekend.

 

[paradigm]

That depends on how you have your filters set surely.

I have our WSUS set to pretty much approve everything. Critical Updates, Definition Updates, Security Updates, Service Packs, Update Rollups and Updates.

WSUS is however, as you say, great.