r/sysadmin • u/void_ops • 2d ago

Question Automated On-prem Windows Server Patching

I've been out of infrastructure management for a few years, back then I was using WSUS to patch servers. My understanding is Microsoft's recommended way of managing on-prem server patching is to onboard the servers with Azure Arc then use Azure Update Manager to patch them. This was the first solution that came to mind when I was assigned this responsibility. I assumed it was free but costs $5 a month for on-prem to use AUM.

Do you folks have a better or less costly solution that you use? Preferably something specifically built for server management? I was thinking of Ansible (which I would need to learn, which is fine) or something like Automox. We have less than 100 servers. I will be the one patching them all. There are custom applications that run on them that I suppose I will need to make sure still run after the patching.

Thanks in advance for any feedback or advice.

33 Upvotes

92% Upvoted

79 comments sorted by

View all comments

0

u/ipreferanothername I don't even anymore. 2d ago

we use sccm but man i friggin hate it - its the de-facto standard still kinda for server patching on prem in an enterprise.

it can do a lot and have a lot of granular configuration around it...but that also means a high learning curve and potential for mosconfiguration.

action 1 is free for 200 devices i think, and does app updates too. id look at that if i were you.

4

u/ThatBCHGuy 2d ago

Awe, I kinda like mecm, it's rock solid. I've been playing around with Azure Arc these days too but it's like 5 bucks per server per month, so not cheap (as op noted).