Bayt.com

Start networking and exchanging professional insights

Register now or log in to join your professional community.

Follow

What is the difference between GPOs, WSUS, SCCM and SCE in software and patch deployment?

SCOM Computer Science Software Distribution IT Microsoft Windows
user-image
Question added by Shaik Tharim Kharni , IT Solutions Professional , GulfNet Solutions Company Limited
Date Posted: 2016/06/14
Upvote (0) Views (6) Followers (2) Answers (2) Report Question
Write an Answer
Register now or log in to answer.
Mohamad Ammoura
by Mohamad Ammoura , IT Support Manager , Pio-tech

In GPOs, you can use .MSI packages and shoud be connected to AD, and there is no centralized reporting for patch deployment,

WSUS the Microsoft's basic offering for enterprise OS and Microsoft application patching,Easy to configure and it will be connect to Microsoft's update catalogue, you can do schedules rollouts by groups.

SCCM (System Centre Config Manager) have SCUP (System Centre Updates Publisher) as one of it's components. This builds on top of the WSUS infrastructure and components and gives you more configuration and reporting, In addition to patching SCCM also can be used for software packaging, and deployment, OS deployment.

 

 

 

SCE

System Center Essentials is a multi-server monitoring solution that uses a single console its good for small  business, It can be used as patch management software for Microsoft products, but it isn't really intended to manage third-party patches like SCCM

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Deleted user
by Deleted user

WSUS is the Microsoft's basic offering for enterprise OS and Microsoft application patching. It is capable of connecting to Microsoft's update catalogue, has a small amount of configuration around scheduling rollouts by groups etc, and limited reporting details on patch deployment.

SCCM (System Centre Config Manager) is the replacement for SMS, it has SCUP (System Centre Updates Publisher) as one of it's components. This builds on top of the WSUS infrastructure and components and gives you massively more configuration and reporting, as well as having the ability to connect to other vendors' update catalogues (Adobe, Dell, HP, etc) and also deploy your own custom patches for any apps. In addition to patching, SCCM also retains all the software packaging, and deployment, OS deployment, etc of SMS.

GPOs (Group Policies) can be used for software deployment, but doesn't have any special patch-specific functions, and has very limited info/reporting on deployments

SCE (System Centre Essentials) is a cut-down SCCM for smaller businesses that shares much of the functionality of it's big brother.

Write Your Answer
More Questions Like This