Microsoft has announced that WSUS (Windows Server Update Services) is being sidetracked. For decades, WSUS was the standard tool for Windows updates, but times have changed: Cloud-first, hybrid infrastructures and the need to reliably patch third-party software make a modern tool indispensable.
Many companies are now faced with the question: What is the best solution to replace WSUS?
We take a close look at two options - ManageEngine Patch Manager Plus and Microsoft Intune - and show why Intune comes out on top in a direct comparison.
WSUS is finished - the requirements have increased
The weaknesses of WSUS have been known for years:
- Windows patches only, no third-party software
- Outdated console and cumbersome administration
- No real cloud integration
- Limited automation
In the age of Zero-day gaps, hybrid environments and compliance requirements that is simply no longer enough. Modern patch management must be automated, cross-platform and seamless.
ManageEngine Patch Manager Plus - the modern all-in-one solution
Patch Manager Plus offers exactly what companies need today:
- Cross-platform: Windows, macOS, Linux and over 900 third-party apps
- Fully automatic: Test, release and roll out patches - completely without manual intervention
- Flexible use: as a cloud service or on-premises
- Speed: Zero-day patches are often available within 24 hours
- Transparency: Comprehensive dashboards, compliance reports and vulnerability analyses
In short: Real enterprise patch management that covers everything - not just Windows.
Intune - well thought out, but incomplete
Microsoft Intune is often brought into play as the successor to WSUS. But in everyday life, it quickly becomes clear that Intune is No fully-fledged patch managementbut rather a MDM tool (Mobile Device Management).
The biggest weaknesses of Intune:
- Limited third-party support - Chrome, Adobe, Java & Co. remain on the sidelines
- No on-premises option - Cloud only, which does not fit every corporate strategy
- Complexity - Policies have to be maintained in a time-consuming manner via Azure AD, groups and profiles
- Patch control only rudimentary - No granular release processes or test groups as with Patch Manager Plus
- Dependence on the Microsoft ecosystem - only works really well if everything is 100 % on Microsoft
Intune is therefore more of a Management tool for modern end devices than a real patch management solution.
Patch Manager Plus vs. Intune - clear victory on points
| Criterion | Patch Manager Plus | Microsoft Intune |
|---|---|---|
|
Patch scope |
Windows, macOS, Linux, >900 third-party apps |
Windows, macOS, mobile devices - third-party providers severely restricted |
|
Automation |
Complete incl. test & release |
Partial, rather rudimentary |
|
Deployment options |
Cloud and On-Premises |
Cloud only (Azure) |
|
Reporting |
Detailed, compliance-ready |
Basic reports, limited |
|
Set-up effort |
Quick to implement |
Complex Azure integration required |
|
Flexibility |
Hybrid environments, heterogeneous infrastructures |
Only useful in Microsoft-centred environments |
Result:
- For companies with Mixed environments, compliance requirements and critical infrastructure Patch Manager Plus is clearly superior.
- Intune, on the other hand, looks like a partial solution that simply does not cover important functions.
Conclusion
The end of WSUS is forcing companies to rethink.
- Intune may be sufficient for pure Microsoft 365 cloud environments as an introduction, but it remains piecemeal - especially when it comes to third-party patching and automation.
- ManageEngine Patch Manager Plus, on the other hand, is a fully-fledged, flexible and scalable solution that really does cover all the requirements of modern patch management.
If you want to be future-proof, Patch Manager Plus is a must.
Your partner for patch management and ManageEngine products - Flying Supporter
Do you have any questions?
We will be happy to help you.
Deutsch 
English (UK) 
Français 
Italiano 