Difference between WUFB and WSUS

Difference between WUFB and WSUS

Topics covered:
What is WUFB (Windows Update For Business)
What is WSUS (Windows Server Update Services) / SCCM with SUP using WSUS
Difference between WUFB and WSUS

What is WUFB
------------
WUFB: Stands for Windows Update for Business Policy
This is a Cloud based solution to deploy windows updates
Modern way of deploying the patches- updates downloads directly from Microsoft Catalog
WUFB is policy which controls the updates (when to make it available) by settings such as Defer updates, Dealine timeline, grace period for restart etc.
You can deploy quality updates, features updates, Drivers and other MS products.
Very minimal configuration is required.
Can expedite updates such as OOB updates.
It doesn’t give option to select / deselect updates – all updates will be applied.


What is WSUS
------------
WSUS stands for Windows Server Updates Services
WSUS / SCCM with WSUS (SUP) is on-premises solutions to deploy updates.
It is a role that can be installed on Windows Server.
WSUS Server download the updates from Microsoft Catalog and server these updates to Devices within your organization.
You can have granular level control on what patches to deploy.
Quite tedious way of deploying the patches. Every month patches needs to be approved / downloaded.
You have to manage the server, responsible for downtime, troubleshooting it.
Devices can be more vulnerable if all patches are not deployed.

Difference between WUFB and WSUS
--------------------------------
Cloud Based solution – patches downloading from Windows Update Service (from internet) On-premises solution – patches downloading from updates stored on the servers.
You don’t have option to select the updates. All updates will be deployed Full control on which updates to deploy.
Easy to setup & configure Requires on-premises infrastructure along with several roles WSUS / SCCM / SUP to configure it.
Can be implemented through:
Intune portal & Group Policy Can be implemented through: Group Policy or SCCM configuration with Software Update Point
Kind of Set and Forget Configuration Tedious task to manage / approve the updates.
Consumes bandwidth to download the updates. Delivery Optimization can be used to help getting contents from peers. Patches are downloaded within the intranet (servers available locally). There is no complaints on patches downloading from internet.


Follow me on:

Email: [email protected]
Blog Website: https://manishbangia.com/blog
Linkedin:   / manishbangia  
Twitter:   / manish_bangia  
Facebook group:   / 183183326326502