Windows patching moving forward

[Heaton, Joseph@Wildlife]

So, I manage our server infrastructure, as far as patching goes.  My coworker handles endpoints, as well as creates the gold image.  We currently use ConfigMgr for all of these tasks, but it seems like more and more, we’re being pushed toward Intune for the endpoints.  But that doesn’t address servers. I know I can add all my servers to Azure Arc, which I’ve actually done for other reasons, and there is some kind of patch management in Azure, but I’ve also heard it is not nearly as mature as ConfigMgr.  If anyone out there has started in the same boat we’re in, and have either changed to something else, or, have come to the conclusion that what we currently use is the best configuration, I would love to hear from you.  I am afraid that management is going to latch onto “Cloud first/Cloud only” and force us into something that is going to make patching and patching compliance much more difficult.  Thoughts?

 

Thanks,

 

Joe Heaton

Managed Services and Operational Support Unit

Information Technology Operations Branch

Data and Technology Division

CA Department of Fish and Wildlife

1700 9^th Street, 3^rd Floor

Sacramento, CA 95811

Phone: 916-902-9116

 

Book time with Heaton, Joseph@Wildlife