SUP management

[Martin9991]

Hey guys,

So firstly my enviroment is currently 2012 R2 C3 (will be updating soon).

 

Im looking at our patch management and i have read some posts about seperating the older updates so for example i have some ADR's (ADR Win 7 Critical_Security Patch All Systems, ADR Win 7 Critical_Security Patch_Phase 2, ADR Win 7 Critical_Security Patch_Phase 1, ADR Microsoft Application Patch Tuesday) these corresponed to 2 deployment packages Win 7 Critical_Security Patch, Microsoft Application Patch.

 

At the end of the year i really want to move the 2016 updates into 1 folder (one for security and 1 for applications like above) into a 2016 end of year folder, So i can do that by creating a new SUP group and editting the memebership of the updates i want to move....However im guessing the updates will all stay in the same deployment package folder location (servername\wsuspackages\ADR Win 7 Critical_Security Patch All Systems)

 

So how do people manage this?

Do you let all your updates all stay in one folder and just have end of year sup groups?

Do you create a new deployment package and download them all again?

 

How do you remove your expired updates? I moved mine into an expired SUG group, then run a script (cant remember the article i got this from) but it seemed to cause issues with the versions of the update folder on each DP, so to fix this i had to create a new folder and download all the updates into this new folder, Pull back the old package from the DP's and delete.

 

Hope this makes sense and someone can share some views on this.