Understanding service packs versus security patchesSecurity patches are usually quick fixes that go through limited testing before release. Service packs are heavily tested and may contain product improvements in addition to fixes.
Signing up for security patch informationSign up to receive regular updates from the Microsoft Technet Security Bulletin.
Minimum patching recommendationsUpdate SBS 2003 to Service Pack 1 as soon as possible, start running updates through Microsoft Update instead of Windows Update, and check the SBS downloads page for any SBS-specific updates not advertised through Microsoft or Windows Update.
Taking a page from the enterprise folksDon't settle for OEM installs of servers and workstations; rebuild them from scratch. Build slipstream install media for service packs.
Selecting the best location for WSUS databasesYou can opt to use WMSDE or SQL for your WSUS database. The data needed for WSUS will be at least 8GB, so make sure that you have a drive or partition with plenty of space to store the current data and allow for future growth.
Setting up a mirror WSUS serverBe aware of potential legal ramifications if you choose to host WSUS data for your clients at an offsite location.
Establishing patch zones and risk zonesCreate different zones in WSUS to accommodate for testing and other deployment factors.
Understanding your patch resourcesIdentify and develop your patch resources to help ease the pain of testing and applying patches.
