Microsoft Configuration Manager vs Microsoft Windows Server Update Services comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Microsoft Configuration Manager and Microsoft Windows Server Update Services based on real PeerSpot user reviews.

Find out in this report how the two Patch Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Microsoft Configuration Manager vs. Microsoft Windows Server Update Services Report (Updated: March 2024).
768,857 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"This has made the management of our environment easier.""It has the ability to perform mass distribution.""It uses detailed descriptions of the workstations, and that is good for me.""The most valuable feature of Microsoft Endpoint Configuration Manager is patch management.""I like its ease of use. It does what you need it to do, and it's a one-stop-shop for the company and for all your deployments. If you incorporate Intune into it, you can have both. You can bring your own devices and corporate devices, and everything runs out of SCCM and Intune.""The main, clear valuable feature is updating the latest, patches and updates from Windows. This is the main feature we really utilize a lot.""This solution helps us by automating the patching of our system.""Microsoft is being very competitive right now, and they are really investing in a lot of new features to be more competitive in the marketplace."

More Microsoft Configuration Manager Pros →

"The noteworthy aspect is the system's capability to handle an extensive range of services and workloads, with the potential for almost unlimited scalability.""The interface is easy to use.""The most valuable feature is the decreased level of internet usage by my network.""With WSUS, you can automatically install and distribute Microsoft security patches without using an internet connection for all clients and servers. It is not difficult to understand how it works and I think it's a very nice tool.""I like that we could evaluate every client and compare some weaknesses and vulnerability exploits in Microsoft Windows Server Update Services. This is a useful way to test applications against an attacker attempting to exploit the operating system.""The solution has great potential and leaves the user with almost limitless possibilities. It is truly a product with a million uses.""Downloads critical reports separately.""Provides the ability to create multiple downstream servers."

More Microsoft Windows Server Update Services Pros →

Cons
"Microsoft Endpoint Configuration Manager can improve by allowing us to schedule the scripts, we don't have a script scheduling option and have to do it manually.""It is a bit of an old and outdated product.""There's no way to say, "I want this maintenance window to be on the second Tuesday of the month." It's strict. This window is this and that's it. You can't fluctuate.""There should probably be better remote support. They should also continue to improve on patch management, patching, and creating or turning products in software into deployable apps.""Not everything is readily available, and there are a lot of commands that are only executable via PowerShell.""In terms of scalability, I believe there's room for improvement. While SCCM is capable of handling our current needs effectively, scalability could be enhanced to accommodate future growth and larger deployments.""The setup was complex and I faced a lot of problems initially because I was new to the solution.""Cloud-based improvements need to be better managed."

More Microsoft Configuration Manager Cons →

"I would like to see support for other operating systems such as Linux.""The product must improve its support.""Some issues with scalability in larger organizations.""Microsoft Windows Server Update Services could improve by being less cumbersome to use. It's somewhat difficult to use, but we manage to get through it.""Microsoft should improve their support for the product. A lot of guys are installing their products, especially Xero. If you have a real problem, though, it's quite difficult to find someone who you can support you.""The database could be improved. In large environments, for example, we often get problems with reporting.""The approval process must be improved.""Setup is complex."

More Microsoft Windows Server Update Services Cons →

Pricing and Cost Advice
  • "Pricing and licensing are horrible. You have to not look at dollar value to use SCCM. It's super-duper expensive but it works. The acquisition cost is expensive, it's labor-intensive. But it works."
  • "Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
  • "Overall, I think it's fine. It's pretty much in-line because there are ways to offset it with the Office 365 licensing."
  • "SCCM comes with its own version of SQL Server. If you use that SQL Server with SCCM and don't use it for another applications than you get an SQL Server for free."
  • "The licensing is good because they have various options, depending on what you are looking for."
  • "Pricing is negotiable with Microsoft, depending upon which of their packages you choose."
  • "When you compare this solution with other tools in the market you might actually find a lot of variation in the pricing and that's why people opt for the other tools rather than Microsoft tools."
  • "Its price is okay because it is part of our licensing."
  • More Microsoft Configuration Manager Pricing and Cost Advice →

  • "Because it is not open-source, it has to compete with open-source solutions. Relatively it is expensive to open-source."
  • "The WSUS cost is included in Microsoft Windows, and there are no licensing fees."
  • "The integration is included in the Windows Server system, and there are no additional fees."
  • "This product comes included with Windows and can be used free of charge."
  • "The licensing of WSUS is free of charge because it comes with the Windows Server operating system, included as a feature of the operating system itself. It's simply a role that you enable within Windows Server."
  • "It doesn't need a license. It's offered for free with Microsoft."
  • "Microsoft's operating model determines the solution's pricing, and we use it based on our enterprise agreement, which incurs an annual cost."
  • "The solution is expensive, and the licensing costs are yearly."
  • More Microsoft Windows Server Update Services Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
    768,857 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the set up will take depends on the kind of technical architecture that your… more »
    Top Answer:ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What I like most about ManageEngine is that I can log on to every PC very easily and… more »
    Top Answer:Microsoft Configuration Manager gives different tools in one solution.
    Top Answer:The reporting capabilities that help maintain compliance and security are good.
    Top Answer:The solution must provide the issue description of the patches. We are not able to trace the issue resolution for the patches. The issues must be available in the patch portal. It will help us to be… more »
    Ranking
    1st
    out of 50 in Patch Management
    Views
    7,053
    Comparisons
    5,408
    Reviews
    25
    Average Words per Review
    458
    Rating
    8.4
    3rd
    out of 50 in Patch Management
    Views
    4,617
    Comparisons
    3,785
    Reviews
    24
    Average Words per Review
    412
    Rating
    8.3
    Comparisons
    Also Known As
    Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM )
    Windows Server Update Services, Microsoft WSUS, WSUS, Microsoft Software Update Services, Software Update Services, Microsoft SUS, SUS, MS Windows Server Update Services
    Learn More
    Overview

    Microsoft Configuration Manager helps IT manage PCs and servers, keeping software up-to-date, setting configuration and security policies, and monitoring system status while giving employees access to corporate applications on the devices that they choose. When Configuration Manager is integrated with Microsoft Intune, you can manage corporate-connected PCs and Macs along with cloud-based mobile devices running Windows, iOS, and Android, all from a single management console.

    New features of Configuration Manager, such as the support of Windows 10 in-place upgrade, co-management with Microsoft Intune, Windows 10 and Microsoft 365 Apps for enterprise Servicing Dashboard, integration with Windows Update for Business, and more make deploying and managing Windows easier than ever before.

    Microsoft Windows Server Update Services (WSUS) is a patch management tool that simplifies the administrator’s task of deploying the latest Microsoft updates. Administrators use WSUS to manage the distribution of updates released through Microsoft Update to computers in their network.

    WSUS has features you can use to manage and distribute updates from a management console. The WSUS server can also be a source of updates to other servers within the organization, acting as an upstream server.

    Microsoft Windows Server Update Services Use Cases

    The four main use cases that WSUS adds value to businesses are:

    • Centralizes update management.
    • Automates update management.
    • Performs general patch management to ensure compliance and protect against vulnerabilities.
    • Downloads all endpoint updates from data centers to a central location and then distribute them across the organization’s network.

    Microsoft Windows Server Update Services Features

    This built-in server includes the following features:

    • Includes Windows PowerShell cmdlets.
    • Features client and server separation, which means you can deliver versions of the Windows Update Agent (WUA) separately from WSUS.
    • Automatic download of updates.
    • Deploy a targeted download of updates to a specific group of computers.
    • Multiple language support.
    • Advanced reporting capabilities.
    • Centralized management of network resources.

    Requirements

    In order to be able to use WSUS to manage and deploy updates, it is important to use a supported WSUS version, such as:

    • WSUS 10.0.14393
    • WSUS 10.0.17763
    • WSUS 6.2 and 6.3 with installed KB 3095113 and KB 3159706

    Microsoft Windows Server Update Services Benefits

    • Stable.
    • Ensures servers are always patched and prevents vulnerabilities.
    • Works great for internal updating.
    • Enforces automated updates and patching for applications.
    • Because the solution is used in the cloud, clients are always using the latest version.
    • Highly scalable and configurable regardless of the organization’s layout.

    Different Types of WSUS Deployments

    • Simple WSUS deployment: A server inside the corporate firewall serves clients via a private intranet. The WSUS server downloads updates by connecting to Microsoft Update. Using this model, you can configure multiple WSUS servers with a parent WSUS server.

    • Computer groups: You can use computer groups to deliver updates to specific computers. There are two basic computer groups: All Computers or Unassigned Computers. When a client first contacts the WSUS server, it is added to both. You can then create a group from the Unassigned Computers group to the new group.

    • WSUS server hierarchies: The flexibility of WSUS enables the creation of complex hierarchies of servers. To do this, you need only a single WSUS server connected to Microsoft Update. This will serve as an “upstream server,” and the connected servers as “downstream servers.”

      • You can link WSUS servers in two modes: autonomous or replica. In the autonomous mode, the upstream server shares the updates with the downstream servers but doesn’t update status or group information.

      • The upstream server shares updates, status, and group information in replica mode. You cannot administer replica servers apart from the upstream WSUS server.
    Sample Customers
    Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
    Information Not Available
    Top Industries
    REVIEWERS
    Computer Software Company17%
    Financial Services Firm13%
    Manufacturing Company13%
    Insurance Company9%
    VISITORS READING REVIEWS
    Computer Software Company12%
    Government11%
    Financial Services Firm11%
    Manufacturing Company8%
    REVIEWERS
    Computer Software Company17%
    Manufacturing Company14%
    Energy/Utilities Company10%
    Security Firm7%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Government12%
    Financial Services Firm9%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business18%
    Midsize Enterprise13%
    Large Enterprise69%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise15%
    Large Enterprise66%
    REVIEWERS
    Small Business39%
    Midsize Enterprise13%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise17%
    Large Enterprise61%
    Buyer's Guide
    Microsoft Configuration Manager vs. Microsoft Windows Server Update Services
    March 2024
    Find out what your peers are saying about Microsoft Configuration Manager vs. Microsoft Windows Server Update Services and other solutions. Updated: March 2024.
    768,857 professionals have used our research since 2012.

    Microsoft Configuration Manager is ranked 1st in Patch Management with 78 reviews while Microsoft Windows Server Update Services is ranked 3rd in Patch Management with 38 reviews. Microsoft Configuration Manager is rated 8.2, while Microsoft Windows Server Update Services is rated 8.0. The top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". On the other hand, the top reviewer of Microsoft Windows Server Update Services writes "Lets us manage all our organization's updates from a single management console". Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Microsoft Intune, BigFix and Tanium, whereas Microsoft Windows Server Update Services is most compared with BigFix, ManageEngine Patch Manager Plus, Quest KACE Systems Management, Ivanti Neurons Patch for Intune and GFI LanGuard. See our Microsoft Configuration Manager vs. Microsoft Windows Server Update Services report.

    See our list of best Patch Management vendors.

    We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.