>>My IT group has a "policy" where they age all Microsoft patches for 30 days before rolling them out to nearly 100 machines.
>>
>>I feel this practice is dangerous and puts everyone at risk. I think that at least for the High Priority Security patches they should be installed immediately.
>>
>>The IT group claims that they install these on a machine in their lab and allegedly "test" it.
>>
>>What you think?
>
>The concerns are justified on both ends. For them, it would also require more work to do it as they become available. And, they also want to test them before broadcasting them at large. But, on some high priority patches, it would then be another concern.


WSUS handled the updates automatically.

If they want to test them (and if they really wanted to test them it might take months per patch for thorough testing), let them do it after the fact and uninstall on the remote chance there is an issue.