Hello Guys, I have around 6 Branch Offices with average number of users from 60-100 and for each site there is WSUS Server installed & GPO is configured for clients to take the updates from local WSUS server. We have recently implemented SCCM 2007 R3 at Data center and all of the sites are connecting through VPN to this site. We want to mange all of the WSUS Servers through SCCM but we want all Windows Critical patches to be installed automatically without any approval process in SCCM. Please suggest the best way to manage this.Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified

we want all Windows Critical patches to be installed automatically without any approval process in SCCM. That does not work when using ConfigMgr 2007. There's no built-in mechanism that can deploy patches automatically, but it can be scripted using the SDK. There were a lot of improvements ConfigMgr 2012, one of them being "auto deployment rules". Torsten Meringer | http://www.mssccmfaq.de