Microsoft Configuration Manager vs Microsoft Windows Server Update Services comparison

Cancel
You must select at least 2 products to compare!
Comparison Buyer's Guide
Executive Summary

We performed a comparison between Microsoft Configuration Manager and Microsoft Windows Server Update Services based on real PeerSpot user reviews.

Find out in this report how the two Patch Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.
To learn more, read our detailed Microsoft Configuration Manager vs. Microsoft Windows Server Update Services Report (Updated: March 2024).
768,740 professionals have used our research since 2012.
Featured Review
Quotes From Members
We asked business professionals to review the solutions they use.
Here are some excerpts of what they said:
Pros
"There is a faster time to rollout. If we get a new PC, it can be ready for productivity right away.""The solution doesn't require any maintenance from our end because it is a cloud-based solution and Microsoft takes care of everything.""The ability to make collections and deploy to them has been great.""I like a lot of the reporting capabilities and baseline configurations.""We're a Microsoft-centric organization, so we are happy with the integration between products.""This solution captures all the devices in our infrastructure.""Microsoft Configuration Manager gives different tools in one solution.""The most valuable feature of this solution is its ability to deploy patches to nearly all applications."

More Microsoft Configuration Manager Pros →

"The most valuable feature is its ability to identify which updates are needed on a particular machine.""The product is quite stable.""It provides central management interface for deployment.""PowerShell is a valuable feature.""The most valuable feature is Server Update's stability.""The product provides a valuable Single Sign-On (SSO) integration feature within our IES environment, particularly with the IT directory and server systems.""The noteworthy aspect is the system's capability to handle an extensive range of services and workloads, with the potential for almost unlimited scalability.""Downloads critical reports separately."

More Microsoft Windows Server Update Services Pros →

Cons
"It is a bit of an old and outdated product.""There is no asset management package included.""It needs to be able to load faster during deployment.""As far as load balancing across, they don't have that support yet, so that you can actually build multiple primaries and have it load balance across. They don't have any of that functionality yet. That would be a nice feature, to scale that way.""Based on my experience with SCCM 2016, the main, big issue is not having a good user-friendly environment. It needs much better GUI.""SCCM should strive to enhance the accuracy of its reporting functions in order to avoid any issues with incorrect or inaccurate data.""They need to improve the support for the Mac operating system.""Regarding this, I'd like to mention the agent situation. When the agent on an end-user device is not functioning correctly, it can be quite problematic. It would be highly beneficial if there were a self-healing mechanism in place. Essentially, if the agent becomes corrupted or encounters issues, it should be able to rectify itself autonomously. This is particularly critical because, in order to utilize a tool like MECM (assuming you're referring to Microsoft System Center Configuration Manager), we need to deploy agents, known as AsMs, on all the devices we use, such as Windows 10 or Windows Server. Sometimes, when we deploy configurations or updates, they don't apply properly due to agent issues. This issue has been present since we began using MECM around 23 years ago. Unfortunately, there is currently no built-in mechanism for the agent to detect its own problems and initiate self-repair. Microsoft doesn’t have any feature to scan vulnerabilities and hence, they could include those."

More Microsoft Configuration Manager Cons →

"The database could be improved. In large environments, for example, we often get problems with reporting.""In the next release, I would like them to provide better connectivity. They must improve the connectivity between the WSS with Microsoft or the client.""The platform’s dashboard and reporting features need enhancement.""It would be good if it could deploy third-party patches or applications.""The ability to have more fine control within this solution is very important. It is not available for the solution in its current state.""The product must integrate with third-party applications.""We have some problems when we update the servers.""Setup is complex."

More Microsoft Windows Server Update Services Cons →

Pricing and Cost Advice
  • "Pricing and licensing are horrible. You have to not look at dollar value to use SCCM. It's super-duper expensive but it works. The acquisition cost is expensive, it's labor-intensive. But it works."
  • "Pricing and licensing are a downside of SCCM. It's expensive. I'd have to confirm this, but I think they changed the licensing to core-based instead of socket-based. It's not cheap, because you have to buy the software, you have to buy SQL. Another thing we learned from talking to Microsoft is that they provide you a license for SQL if you run it on the same box as the primary server. If you run it outside that box, you have to buy SQL. Microsoft does recommend you running it on the same box because of performance. But then, in order to run SQL, SCCM, and everything on the same box, you better have some resources. It's an expensive solution. There's no doubt about it."
  • "Overall, I think it's fine. It's pretty much in-line because there are ways to offset it with the Office 365 licensing."
  • "SCCM comes with its own version of SQL Server. If you use that SQL Server with SCCM and don't use it for another applications than you get an SQL Server for free."
  • "The licensing is good because they have various options, depending on what you are looking for."
  • "Pricing is negotiable with Microsoft, depending upon which of their packages you choose."
  • "When you compare this solution with other tools in the market you might actually find a lot of variation in the pricing and that's why people opt for the other tools rather than Microsoft tools."
  • "Its price is okay because it is part of our licensing."
  • More Microsoft Configuration Manager Pricing and Cost Advice →

  • "Because it is not open-source, it has to compete with open-source solutions. Relatively it is expensive to open-source."
  • "The WSUS cost is included in Microsoft Windows, and there are no licensing fees."
  • "The integration is included in the Windows Server system, and there are no additional fees."
  • "This product comes included with Windows and can be used free of charge."
  • "The licensing of WSUS is free of charge because it comes with the Windows Server operating system, included as a feature of the operating system itself. It's simply a role that you enable within Windows Server."
  • "It doesn't need a license. It's offered for free with Microsoft."
  • "Microsoft's operating model determines the solution's pricing, and we use it based on our enterprise agreement, which incurs an annual cost."
  • "The solution is expensive, and the licensing costs are yearly."
  • More Microsoft Windows Server Update Services Pricing and Cost Advice →

    report
    Use our free recommendation engine to learn which Patch Management solutions are best for your needs.
    768,740 professionals have used our research since 2012.
    Questions from the Community
    Top Answer:Microsoft Endpoint Configuration Manager takes knowledge and research to properly configure. The length of time that the set up will take depends on the kind of technical architecture that your… more »
    Top Answer:ManageEngine Desktop Central is very easy to set up, is scalable, stable, and also has very good patch management. What I like most about ManageEngine is that I can log on to every PC very easily and… more »
    Top Answer:Microsoft Configuration Manager gives different tools in one solution.
    Top Answer:The reporting capabilities that help maintain compliance and security are good.
    Top Answer:The solution must provide the issue description of the patches. We are not able to trace the issue resolution for the patches. The issues must be available in the patch portal. It will help us to be… more »
    Ranking
    1st
    out of 50 in Patch Management
    Views
    7,053
    Comparisons
    5,408
    Reviews
    25
    Average Words per Review
    458
    Rating
    8.4
    3rd
    out of 50 in Patch Management
    Views
    4,617
    Comparisons
    3,785
    Reviews
    24
    Average Words per Review
    412
    Rating
    8.3
    Comparisons
    Also Known As
    Microsoft Endpoint Configuration Manager, System Center Configuration Manager (SCCM )
    Windows Server Update Services, Microsoft WSUS, WSUS, Microsoft Software Update Services, Software Update Services, Microsoft SUS, SUS, MS Windows Server Update Services
    Learn More
    Overview

    Microsoft Configuration Manager helps IT manage PCs and servers, keeping software up-to-date, setting configuration and security policies, and monitoring system status while giving employees access to corporate applications on the devices that they choose. When Configuration Manager is integrated with Microsoft Intune, you can manage corporate-connected PCs and Macs along with cloud-based mobile devices running Windows, iOS, and Android, all from a single management console.

    New features of Configuration Manager, such as the support of Windows 10 in-place upgrade, co-management with Microsoft Intune, Windows 10 and Microsoft 365 Apps for enterprise Servicing Dashboard, integration with Windows Update for Business, and more make deploying and managing Windows easier than ever before.

    Microsoft Windows Server Update Services (WSUS) is a patch management tool that simplifies the administrator’s task of deploying the latest Microsoft updates. Administrators use WSUS to manage the distribution of updates released through Microsoft Update to computers in their network.

    WSUS has features you can use to manage and distribute updates from a management console. The WSUS server can also be a source of updates to other servers within the organization, acting as an upstream server.

    Microsoft Windows Server Update Services Use Cases

    The four main use cases that WSUS adds value to businesses are:

    • Centralizes update management.
    • Automates update management.
    • Performs general patch management to ensure compliance and protect against vulnerabilities.
    • Downloads all endpoint updates from data centers to a central location and then distribute them across the organization’s network.

    Microsoft Windows Server Update Services Features

    This built-in server includes the following features:

    • Includes Windows PowerShell cmdlets.
    • Features client and server separation, which means you can deliver versions of the Windows Update Agent (WUA) separately from WSUS.
    • Automatic download of updates.
    • Deploy a targeted download of updates to a specific group of computers.
    • Multiple language support.
    • Advanced reporting capabilities.
    • Centralized management of network resources.

    Requirements

    In order to be able to use WSUS to manage and deploy updates, it is important to use a supported WSUS version, such as:

    • WSUS 10.0.14393
    • WSUS 10.0.17763
    • WSUS 6.2 and 6.3 with installed KB 3095113 and KB 3159706

    Microsoft Windows Server Update Services Benefits

    • Stable.
    • Ensures servers are always patched and prevents vulnerabilities.
    • Works great for internal updating.
    • Enforces automated updates and patching for applications.
    • Because the solution is used in the cloud, clients are always using the latest version.
    • Highly scalable and configurable regardless of the organization’s layout.

    Different Types of WSUS Deployments

    • Simple WSUS deployment: A server inside the corporate firewall serves clients via a private intranet. The WSUS server downloads updates by connecting to Microsoft Update. Using this model, you can configure multiple WSUS servers with a parent WSUS server.

    • Computer groups: You can use computer groups to deliver updates to specific computers. There are two basic computer groups: All Computers or Unassigned Computers. When a client first contacts the WSUS server, it is added to both. You can then create a group from the Unassigned Computers group to the new group.

    • WSUS server hierarchies: The flexibility of WSUS enables the creation of complex hierarchies of servers. To do this, you need only a single WSUS server connected to Microsoft Update. This will serve as an “upstream server,” and the connected servers as “downstream servers.”

      • You can link WSUS servers in two modes: autonomous or replica. In the autonomous mode, the upstream server shares the updates with the downstream servers but doesn’t update status or group information.

      • The upstream server shares updates, status, and group information in replica mode. You cannot administer replica servers apart from the upstream WSUS server.
    Sample Customers
    Bank Alfalah Ltd., Wªrth Handelsges.m.b.H, Dimension Data, Japan Business Systems, St. Lucie County Public Schools, MISC Berhad
    Information Not Available
    Top Industries
    REVIEWERS
    Computer Software Company17%
    Financial Services Firm13%
    Manufacturing Company13%
    Insurance Company9%
    VISITORS READING REVIEWS
    Computer Software Company12%
    Government11%
    Financial Services Firm11%
    Manufacturing Company8%
    REVIEWERS
    Computer Software Company17%
    Manufacturing Company14%
    Energy/Utilities Company10%
    Security Firm7%
    VISITORS READING REVIEWS
    Computer Software Company14%
    Government12%
    Financial Services Firm9%
    Manufacturing Company8%
    Company Size
    REVIEWERS
    Small Business18%
    Midsize Enterprise13%
    Large Enterprise69%
    VISITORS READING REVIEWS
    Small Business18%
    Midsize Enterprise15%
    Large Enterprise66%
    REVIEWERS
    Small Business39%
    Midsize Enterprise13%
    Large Enterprise47%
    VISITORS READING REVIEWS
    Small Business22%
    Midsize Enterprise17%
    Large Enterprise61%
    Buyer's Guide
    Microsoft Configuration Manager vs. Microsoft Windows Server Update Services
    March 2024
    Find out what your peers are saying about Microsoft Configuration Manager vs. Microsoft Windows Server Update Services and other solutions. Updated: March 2024.
    768,740 professionals have used our research since 2012.

    Microsoft Configuration Manager is ranked 1st in Patch Management with 78 reviews while Microsoft Windows Server Update Services is ranked 3rd in Patch Management with 38 reviews. Microsoft Configuration Manager is rated 8.2, while Microsoft Windows Server Update Services is rated 8.0. The top reviewer of Microsoft Configuration Manager writes "Seamless system updates, useful integration, and reliable". On the other hand, the top reviewer of Microsoft Windows Server Update Services writes "Lets us manage all our organization's updates from a single management console". Microsoft Configuration Manager is most compared with Red Hat Ansible Automation Platform, ManageEngine Endpoint Central, Microsoft Intune, BigFix and Tanium, whereas Microsoft Windows Server Update Services is most compared with BigFix, ManageEngine Patch Manager Plus, Quest KACE Systems Management, Ivanti Neurons Patch for Intune and GFI LanGuard. See our Microsoft Configuration Manager vs. Microsoft Windows Server Update Services report.

    See our list of best Patch Management vendors.

    We monitor all Patch Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.