Can WSUS and Kace live side by side
We have WSUS still running and a few of our servers still use it but have Kace installed too. Wondering if this is an issue as I notice WSUS is waiting telling me there are patches to be deployed on a server (in this case KB4022722) yet Kace has run a patch schedule and not installed this patch. Could this be an issue of having WSUS running? WSUS downloads the patches but doesn't install them.
Thanks
1 Comment
[ + ] Show comment
-
I am glad people are commenting on this, because it is something I am looking at currently. There is A LOT of confusion for us about what is being reported by Windows, and what is reported by KACE as being deployed to the client (referring to Windows Updates only). We are currently dealing with auditing machine with auto updates enabled and clarifying behavior when AU is on, and KACE deployments are heppning as well. - fcoetech 7 years ago
Answers (2)
Answer Summary:
Please log in to answer
Posted by:
Nico_K
7 years ago
Top Answer
both can work side by side.
The way how the patches are deployed are slightly different.
With KACE you can patch more than only MS products by default.
And the KACE feeds are checked before they are provided so only patches that are secure will be provided (MS reworks sometimes patches which are fatal sometimes. With KACE usually the first buggy patches are not deployed in the first place due to the testing done.
The way how the patches are deployed are slightly different.
With KACE you can patch more than only MS products by default.
And the KACE feeds are checked before they are provided so only patches that are secure will be provided (MS reworks sometimes patches which are fatal sometimes. With KACE usually the first buggy patches are not deployed in the first place due to the testing done.
Comments:
-
Thanks Nico_K, I discovered and error in my patching rule that was stopping the patching via Kace. We will allow Kace to do all the patching from now on. - Bruce_P 7 years ago
Posted by:
Channeler
7 years ago
I would say do not use them together...
KACE relies a lot on reading Windows Registry to determine the status for each patch... I would say no... but I would say, they can´t work well together.
We use KACE only, together with Microsoft Baseline Analyzer, this is to determine if KACE is lying or not, about missing patches....
KACE relies a lot on reading Windows Registry to determine the status for each patch... I would say no... but I would say, they can´t work well together.
We use KACE only, together with Microsoft Baseline Analyzer, this is to determine if KACE is lying or not, about missing patches....
