Microsoft extends WSUS support amid changing patching landscape

In early April 2025, Microsoft announced that it would continue to support Windows Server Update Services (WSUS), postponing the initial plan to deprecate it. The decision comes after receiving feedback indicating that some organizations rely heavily on WSUS for managing updates, particularly in scenarios involving disconnected devices. The initial deadline for discontinuing support was set for April 18, 2025, and the announcement two weeks prior created challenges for organizations trying to adapt their update strategies. The reliance on WSUS highlights its importance in environments where strict compliance or legal requirements dictate its use. Microsoft had previously aimed to transition users to cloud-based solutions like Intune and Windows Autopatch. However, these alternatives are not yet able to fully replace WSUS, especially in air-gapped and highly restricted networks, where internet connectivity is not guaranteed. As such, support for WSUS will continue, acknowledging the limitations of current cloud-based solutions. Gene Moody, the field CTO at Action1, emphasized that WSUS, though over two decades old, remains a crucial tool for many organizations. He critiqued the evolving IT landscape, noting that today's patching requirements are significantly more complex and demanding than when WSUS was first introduced. According to Moody, WSUS lacks many capabilities necessary for modern security, such as enforcing updates and providing real-time visibility into device statuses. This raises concerns about how well organizations using WSUS can secure their endpoints given the increasing threats in cybersecurity. While Microsoft’s reaffirmation of WSUS speaks to its continued relevance, it does not indicate that the company is abandoning its long-term shift towards cloud solutions. Instead, this decision reflects an understanding of the critical need for some organizations to maintain the tool for effective updates, reinforcing the idea that while WSUS is outdated, it cannot yet be completely phased out. This iterative approach towards updating patching strategies and overcoming the limitations of available tools may ultimately shape future developments in endpoint security management.