We set up Windows domains from scratch and then all servers (2003, 2008 R2, 2012, etc) sit offline (including DC's) for months before being used again. This causes a nightmare when trying to patch the servers once they are turned on again since they are so out of date. The current method is to log in individually and update them manually one by one (domains may include 10 server or 50 servers), which takes forever!
I had a thought of trying to speed this up by sharing a WSUS server to provision updates. My question is would this be feasible? Would it be practical to share one WSUS for all the domains (given I remove it and join to each domain when needed).
My concerns are with:
- Storage, I can't keep a years worth of patches for all the OS's
- Because of storage constraints, how would I go about downloading patches for each domain that I want to patch that say is 5 months old and then the next one is 1 month old and then back another one that is 6 months old. This is going to be my first time working with WSUS.