The main problem with WSUS is that the management console doesn't allow you to do a lot of operations. It's actually quite a primitive console, and has been since day one. In order to be more effective, you need to use another tool from Microsoft that can take advantage of WSUS and also offer you the extra features you need.

For example, SCCM (System Center Configuration Manager) is software from Microsoft that uses WSUS and gives you many more features than you would get from using WSUS alone. To truly manage the updates of your entire environment effectively, you either need to automate the features you need with PowerShell scripts or you need to use SCCM.

To illustrate one particular limitation of the basic WSUS management console, when you download updates with classifications per operating system, sometimes it doesn't offer you a good way to display or regroup updates that are part of a specific group. Or, as another example, if you just want to see the latest updates, the WSUS console will simply show you all the updates that are available. Microsoft uses an updating process whereby each new update will supersede the previous one, meaning it will expire the old updates, but the management console doesn't offer you a way to regroup or display only the new updates while excluding the ones that have expired. This is one of the many management features that are missing from the WSUS console.

One other area of improvement is that when you want to add servers to use WSUS, you can't easily add or search for a server. To add a server into the management console, you need to do other things and wait until the check cycle starts, meaning that you need to wait for a while until you see the newly-added server that will be handled by the WSUS server.

We have a web-based GUI and can access it from other systems, also. We can always update all the policies and patches with ease if there is a good GUI. They need to continue to offer the GUI interface to make patching easier.

They should offer patch management across platforms.

They should also include application software. Catered options should be included for different applications. They should offer a generic patch management solution for general applications.

One area for potential improvement involves the administrative portal, where numerous options, including asset management and patch management, are integrated. There's a suggestion that decoupling these integrated tools might be beneficial. This decoupling could involve separating services or options to provide more flexibility and potentially reduce costs, allowing for a more modular approach to the utilization of these tools.

The solution's stability could be improved because sometimes, there are some problems in communication and sending updates and patches.

The policies must be made easier. The tool must allow users to update the policies. Currently, we can only create policies and update a few things in them. The product must provide more functions. The approval process must be improved. Currently, it is a very simple process. We just approve security updates and critical updates. Other vendors have better approval processes.

The platform’s dashboard and reporting features need enhancement.

The only complex part was the solution’s tricky setup phase. It should be made easier. The person working in our company faced challenges initially while trying to enter the solution's setup phase. However, going through the documentation for the solution might be helpful.

The database could be improved. In large environments, for example, we often get problems with reporting.

The product must improve its support.

It would be good if it could deploy third-party patches or applications.

A few bugs need to be figured out for the security side. A few of the bugs are not even fixed completely on a full scale, and sometimes that will be tough. If a client is not maintaining proper network security, their data will be breached. The security updates need to be released regularly from Microsoft so that there won't be any loopholes in the OS.

The initial setup may be a bit difficult for beginners. 

The solution is costly.

When we shift onto the graphical user interface, there'll be a bit of a lack of processing speed as there are a number of graphics included in the OS when we shift to the GUI. We'd like CLI and GUI to be equally responsive. Many users prefer the GUI, yet then they suffer from less performance due to the graphics.

We have some problems when we update the servers.

Microsoft Windows Server Update Services must include functions for providing updates about inventory. 

In the next release, I would like them to provide better connectivity. They must improve the connectivity between the WSS with Microsoft or the client.

The security could be improved.

This solution's deployment could be improved. When I was the admin, there were some problems when deploying to clients. Sometimes the policy is not effective. I guess, more on the reliability side, more reliable means working more often with the clients. It could be easier to deploy. 

The solution must provide the issue description of the patches. We are not able to trace the issue resolution for the patches. The issues must be available in the patch portal. It will help us to be aware of the upcoming patches and the resolutions provided. We are not able to trace the problems we are facing on our platform. We need to know which patch or update will give us a solution for our issues. There should be more frequent updates.

They could reduce the platform's prices. Additionally, they should enhance cloud security and make it more user-friendly.

The customization capabilities could be improved. 

The product must integrate with third-party applications. I'd like to use the product to verify third-party updates as well as Microsoft updates.

The product needs to improve its user interface. 

More integration with different platforms would be an improvement. In the next release, Microsoft should expand on automation.

One area for improvement is that WSUS does not give 100% accuracy, so you cannot be completely certain that all of your systems are fully patched. There are always 5-10% of your systems that have not been updated with the correct patches, which is an open gate for security threats. I also think that the product needs a better utility and report mechanism. In the next release, I would like to see better compatibility for non-Windows servers and tools.

I don't really know what can be improved in the newest version of the product because they are about to release Windows Server 2019 and I am still working with version 2016, which is the previous versions of Windows Server. I'm not aware of the current improvements in the 2019 version first-hand so I don't know how to improve the newest release.

What I hope to see in the 2019 version of Windows Server is an improvement in how terminal services are implemented. This is one of the problems with the 2016 version. There are parts where functionality would be better if it wasn't based on PowerShell commands. I'm more of a GUI (graphic user interface) guy and I like the way a graphic interface can simplify using a product. I like to be able to see the GUI windows and graphic controls and I am less interested in using the command line because it is more complicated. There is no reason why the graphic interface is not better while also allowing access to the PowerShell.

One of the most interesting things that could be improved from the 2016 version would be having the ability to use SIC codes for call centers. They have some solutions for video chat and messenger, and other communications services. But when you need the work station's IP for the phone, you have to turn to the manufacturer for a solution. For example, with Panasonic, you end up purchasing the entire stack of server IPs to host the operation and operator. On-premises, it would have been nice if it was in Microsoft Server and not implemented through linked servers or messenger servers or other options. It would have been more convenient if it were just included.

We faced issues with updates with some clients, so we have downloaded a patch appliance in those instances.

The interface is not user-friendly. It looks like Windows 98 and it needs a different format, maybe something web-based, or perhaps it's time to rebuild from scratch. It needs to be something that provides clear options and should include an FAQ section to help provide some answers without having to search Google or contact technical support. 

Microsoft Windows Server Update Services could improve by being less cumbersome to use. It's somewhat difficult to use, but we manage to get through it.

Tagging in the server is complicated, and it's not easy to understand how to put it into a specific category. This solution is difficult for some people to understand.

The package validation process should be improved.

In the next release, I would like to see additional tools added to fix the engine issues on the client's side.

When updates are displayed they are in one big list on the screen, and the naming convention isn't such that it groups them by the operating system. This makes it difficult because there are updates for Windows 7, Windows 10, and so forth, and I have to scroll through and select out the ones that are relevant to the operating system. Having the ability to group updates by the operating systems would be very helpful.

IIS is the web server for Windows Server. There are some bugs in IIS. It must be improved.

Microsoft Windows Server Update Services could improve the ease of use.

There are some incompatibilities or conflicts between WSUS and IIS because sometimes when running WSUS, I have to stop my IIS and restart it in order to connect. I have searched Google on the issue and I have found that it is a common problem. This is something that Microsoft should solve in the next release.

I would like to see support for other operating systems such as Linux. If you install WSUS and there are other operating systems on the network like Linux Red Hat, Ubuntu, or Debian, then it should be able to update them. It would be amazing.

It's not always easy to set up.

Their Local Group Policy works well for the Microsoft environment, however, we need it or other software as well. We've realized that we have to pay. We have to buy extra items in order to access this catalog of different updates.

The reporting is not as practical as I would like it to be. It's something that I would like them to improve in future releases.

It would be nice if there were more alerts to let us know what is missing. It would be nice if there was an integration with the main server and with the active directory so that I can receive the necessary alerts. It would be good to know which equipment is connected to the directory and which are behind schedule with updates. 

I think some features could be added to improve this product. I'd like to see a critical update alarm where I get notifications regarding critical or security updates and receive a review of it.  

For an additional feature, I'd like to see the option of receiving alarms wherever I am, so that if something happens and there's nobody at work, the problem can be dealt with efficiently. 

Reporting flexibility is something that can be improved.

Job management and control is an area that is in need of improvement.

Microsoft should improve their support for the product. A lot of guys are installing their products, especially Xero. If you have a real problem, though, it's quite difficult to find someone who you can support you.

I think Microsoft should develop its ReFS volumes in a little bit more detail. Also, I wish they would demystify their updates scenarios, like patching and updating the system.

Many areas need improvement and many features don't work.

The clean up feature doesn't work. It's doesn't delete old updates that are not needed anymore.

The configuration process needs improvement, as it is not very good. The integration with Windows 10 was difficult, and a bit tricky.

The old backup files created by this solution use up a lot of storage, and this needs to be improved.

This solution would meet my needs if these issues would not occur every month.

I would want the GUI on the continuing interface of the WSUS and more fine grain control. I don't want full blown enterprises. I want another object deployment, in a different kind of way that the enterprise just doesn't provide for me right now.