8.14. Final Thoughts

Throughout this chapter, we've talked about some of the tools provided by Microsoft that can assist with the securing of a network. Patching and patch management is a critical component of keeping networks safe. WSUS is one useful tool that arrives with a very compelling price (free) that can assist with that process. Being scalable from tens to thousands of systems, WSUS is an effective tool in managing the patching process for all types of IT environments.

Also available from Microsoft is the MBSA. This no-cost tool augments the capabilities of WSUS by providing further information about client security configuration and necessary changes to that configuration to secure the client against external attack.

If you'd like ...

Get Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.