WSUS Is Deprecated. Your Choice: Keep It or Replace It.
Microsoft’s answers to WSUS live in the cloud. JetPatch gives you two on-prem options from one console: keep patching through your existing WSUS, or replace it with the JetPatch repository — for Windows Server, Linux, AIX and Solaris, connected or fully air-gapped.
Every WSUS Estate Needs a New Home.
WSUS was free, bundled and on-prem. Its successors are none of those things for servers.
Intune
Built for laptops and desktops. Cloud device management — not designed for data-center servers or isolated networks.
Azure Update Manager
Manages on-prem servers only through Azure Arc, with an Azure tenant and a per-server monthly fee. Disconnected sites are left out.
The gap JetPatch fills
On-prem, disconnected, sovereign and mixed-OS server estates — the servers that can’t or won’t route patching through a vendor cloud.
Keep WSUS, Replace WSUS — or Move Between Them.
Whichever you choose, you get the same governance, scheduling and compliance reporting. Switch when you’re ready — no rip-and-replace.
Option 1 — Work with your WSUS
Deep WSUS integration with bidirectional sync, plus third-party application patching through your WSUS pipeline. Keep what works while it’s still supported.
Option 2 — Replace WSUS
Patch Windows Server from the JetPatch repository with no WSUS server to maintain — including Offline Windows Patching for fully air-gapped sites.
Know before you push
Endpoint Readiness checks every Windows server before the maintenance window, so failures are fixed before they happen.
Governed rollouts
Approvals, maintenance windows and QA → staging → production sequencing, with compliance reporting for audits.
One console, every OS
Patch Windows Server alongside RHEL, Ubuntu, SUSE, AIX and Solaris — one inventory, one compliance view.
Move at your pace
Start with WSUS mode, pilot the JetPatch repository on a group of servers, and switch over when it suits your change calendar.
Where Patching Is Hardest.
Healthcare, energy, financial services and government teams use JetPatch to keep critical servers compliant — HIPAA, NERC-CIP, PCI-DSS, ISO 27001 and NIS2 — without moving their patch data into someone else’s cloud.
Replacing WSUS: Questions We Hear Every Week
Is WSUS being discontinued?
Microsoft announced in September 2024 that Windows Server Update Services (WSUS) is deprecated. It still ships with Windows Server for now, but it receives no new features. Every WSUS estate will need a plan for what comes next.
What replaces WSUS for on-premises servers?
Microsoft’s successors — Intune and Azure Update Manager — are cloud services. Intune is built for laptops and desktops, and Azure Update Manager manages on-prem servers through Azure Arc with a per-server monthly fee. Organizations that need patching to stay on their own network use an on-prem platform such as JetPatch.
Do I need Azure to replace WSUS?
No. JetPatch runs on your own infrastructure. You can keep using WSUS through JetPatch, or replace it with the JetPatch repository — either way, no Azure tenant, Azure Arc or vendor cloud is required.
Can I patch air-gapped Windows servers without WSUS?
Yes. JetPatch Offline Windows Patching delivers verified updates to fully isolated servers without giving them internet access.
Can I keep using WSUS with JetPatch?
Yes. JetPatch supports both: it works with your existing WSUS today, and can replace it with the JetPatch repository whenever you are ready — one console throughout.
Does JetPatch patch Linux and Unix servers too?
Yes. The same console patches RHEL, Ubuntu, SUSE and other Linux distributions, plus legacy AIX and Solaris — so Windows and Unix teams work from one compliance view.
Keep WSUS or Replace It — On Your Terms.
Talk to our team about the right WSUS path for your servers — without moving them to the cloud.