As a sysadmin at almost-Windows-only company, I am still kind of surprised at the state of updates on Windows. On Debian, CentOS, or FreeBSD, server and deskto

As a sysadmin at almost-Windows-only company, I am still kind of surprised at the state of updates on Windows. On Debian, CentOS, or FreeBSD, server and desktop, I usually install all and any updates that are available, reboot if there is an update to the kernel (or libc) and move on. The fact that there is even a need for "patch management" beyond "just ing deploy them already" is ... embarrassing for Microsoft, IMHO. But simply installing any and all updates that Microsoft publishes has shown to be a bad idea. So I really hope that at least using a WSUS will allow me to pick what updates get installed.