Setting Up a New WSUS Deployment: Need Help!

If you must stick with WSUS for now, keep it streamlined. Only sync the products and classifications you actually require, and avoid express packages. Make sure to run maintenance scripts like Optimize-WsusServer regularly. The main issues often come from scope mismanagement and not performing proper database hygiene.

If your devices are managed through Intune, consider using Intune and Azure Update Manager for server updates instead. This could keep your bandwidth usage in check with the help of delivery optimization. Just keep in mind that WSUS is technically deprecated, so you’ll need to migrate away from it eventually.

WSUS is reaching the end of its usefulness. Instead, look into Intune for endpoint management and Azure Update Manager for your on-prem servers. These solutions are designed to replace WSUS and they’re generally seen as more effective nowadays.

Honestly, if you're starting fresh, think about using something other than WSUS. There are several other options out there now that can handle patch management in a more modern way. WSUS can be quite a hassle, and you might find better solutions that suit your needs without all the headaches.

Consider if you have a Remote Monitoring and Management (RMM) tool in place. Many of them can efficiently manage patching. We use Datto for our servers and workstations, and it handles all our updates without needing WSUS.