WSUS is not worth the powder to blow it to hell.
Been there. Done that. Chucked it.
After installing win2k server on a box,
then applying the various upgrades of software that it required, then installing WSUS, then downloading the 600 and some patches that were available, then going through them, and reading the sections that say "superceded patches cannot just be eliminated" then running into issues that *some* patches cannot be automatically installed because they require user intervention. Then finding that an 800 MHz machine with 256MB of ram is not sufficient to run as a patch server with reasonable response, I said )#&$(& it and looked for alternative solutions.
Surprise! There is a whole aftermarket industry for patch managment for windows. Seems I'm not the only one to get frustrated with this. Some are big bucks.
I ended up using autopatcher "www.autopatcher.com" It's free. They roll up all the security patches once a month, and have a few tweaks on top of that. It takes 10 minutes to go through the list and select which patches need to be applied locally. You can set it to run unattended.
It just works. Recommended.
