"Windows Updates": Disabled, Enabled, or Server Installed

egrizzly

Just out of curiosity, since most of us probably work in tech roles. How do your IT departments manage Windows Updates in the company workstations where you work. Do they just:

a) Let leave the "windows updates" enabled on the workstations leaving them to download and install Microsoft updates at will anytime without admin control?

b) Disable windows updates on the workstations without ever installing updates of any kind at any time? or

c) Leave windows updates disabled on the individual workstations but have those updates installed using software deployment servers (e.g. SCCM)


If you can elaborate on how its done in your IT department that would be great. Just saying since this is often an annoying occurrence in many companies.

markulous

WSUS and group policy is typically the way I prefer doing it for endpoints.

Depending on the environment, and the budget, I usually push a VDI environment so that way all you have to do is update the parent image.