Re: Microsoft split brain: WSUS can't now automatically approve only the security patch
I wouldn't risk having ANYTHING set to automatically approve, madness!
I have a sub set of servers and workstations (VM's) that I use just for testing updates, and NEVER roll them out on day one!
And this ISN'T just a windows issue, patch management for the MILLION + 1 Linux distros is FAR, FAR worse. Our Linux's support guys have many more problems with their Linux workstations that we do with our Windows ones and they have a quarter of the number