Greetings!

Is anyone using WSUS for patch management? If so, what are you doing to control when patches are applied?

We have specific monthly windows when patches can be applied - Dev/Test the first week, QA the second week, contingency production the third week, and primary production the fourth week. I've created some UDFs to check for WSUS pending reboots, approved updates; view/set local AU settings, and force the download & install of pending updates.

I'd share them freely if there's interest, but the documentation is limited at this time. Let me know and I'll make a zip file of the UDF library and docs available. Once it's had some test time, I'll post them properly in the UDF library.

The library can be downloaded from my web site - www.innotechcg.com - Go to Products, then Admin ToolChest.

Glenn

PS - these are the functions in the library:
Code:

; Functions in library:
;
; wuCheckUpdateAgent() Check the version of the update agent - update it if not current
; wuGetConfig() Returns an array containing the WSUS configuration
; wuSetConfig() Sets the WSUS configuration from an array
; wuRestartStatus() Determines the Restart Pending status
; wuGetAvailableUpdates() Returns an array of available updates
; wuDownloadUpdates() Download and optionally install updates