What's inside Windows Update Service

Sadly, it seems, as long as we have Windows servers and desktops there'll be a need for patch management services for these operating systems. It's not that there are other operating systems that never need patching (there aren't), but that the sheer quantity of Windows patches makes even a little bit of automation a welcome relief.

Over the past couple of years, we've looked at a number of third party patch management systems (as well as Microsoft's own tools) in this newsletter. But now Microsoft has something new, and it's something we should be aware of.

You may remember that when I first talked about Microsoft's Software Update Service (http://www.nwfusion.com/newsletters/nt/2003/0922nt2.html) I mentioned that Redmond was conducting a survey "...to better understand how customers use the Software Update Services Feature Pack." (Microsoft's own words at the time). The feedback was plentiful and useful, Microsoft read and evaluated it and then - wonder of wonders - responded by redesigning the patch management system. The result, Windows Update Service (WUS), seems to be a winner.

To continue reading, register here and become an Insider. You'll get free access to premium content from CIO, Computerworld, CSO, InfoWorld, and Network World. See more Insider content or sign in.

Sadly, it seems, as long as we have Windows servers and desktops there'll be a need for patch management services for these operating systems. It's not that there are other operating systems that never need patching (there aren't), but that the sheer quantity of Windows patches makes even a little bit of automation a welcome relief.

Over the past couple of years, we've looked at a number of third party patch management systems (as well as Microsoft's own tools) in this newsletter. But now Microsoft has something new, and it's something we should be aware of.

You may remember that when I first talked about Microsoft's Software Update Service (http://www.nwfusion.com/newsletters/nt/2003/0922nt2.html) I mentioned that Redmond was conducting a survey "...to better understand how customers use the Software Update Services Feature Pack." (Microsoft's own words at the time). The feedback was plentiful and useful, Microsoft read and evaluated it and then - wonder of wonders - responded by redesigning the patch management system. The result, Windows Update Service (WUS), seems to be a winner.

Available now as a public beta, WUS was recently evaluated by Mandy Andress of Network World's Lab Alliance (see link below) who pronounced it "a definite improvement over Software Update Services, the product it replaces," as well as "a credible alternative to existing patch management products such as BigFix and PatchLink for cost-conscious, Windows-only shops." This last means that, while very good, WUS is not as feature rich as many of the third-party commercial products available to you.

Still, WUS is a marked improvement to Microsoft Software Update Services, which it will replace. Among the new and improved features in WUS, include more update classifications. Microsoft uses update classifications to categorize types of updates, more classifications means finer grained control. The current update classifications include Critical Updates, Security Updates, and Drivers (for example, hardware driver updates); the new update classifications include:

*Connectors: Software components designed to support connection between software.
*Guidance: Scripts, code samples, and technical guidance designed to help in the deployment and use of a product or technology.
*Tools: Utilities or features that help users accomplish a task or set of tasks.

Other improved features in WUS include:
 
* Expanded support for Microsoft products, including Office, SQL Server, Exchange, and critical hardware drivers.
* The ability to filter updates obtained from Microsoft Update by product and update classification
* Availability of WUS Server in 17 world languages.
* Better bandwidth efficiency and flexibility when you install Background Intelligent Transfer Service (BITS) version 2.0.
* WUS can target sets of updates to specific groups of computers.
* WUS has new flexible deployment options to either set up computers to download updates from WUS servers or directly from Microsoft Update.
* There are improved reporting capabilities that enable administrators to review update status and compliance on multiple computers.
* WUS (compared to SUS) is better able to manage both client and server components extensibly through the API.
* A command-line tool that enables you to migrate from a SUS server to a WUS server, a rather neat touch.