How to organize OS updates in a domain?

Question

System administration

There is an opinion that updating the OS will fix some bugs and holes in the OS. And makes it more secure. And for this purpose it would be desirable to organize automatic updating of all. It is possible to estimate the update server, I heard from the corner of my ear that such exist) For accounting, this is important.

Answer 1

Updates - "Admin itch" and no more. None of the updates personally brought me any practical benefit, only problems, often extremely serious ones. Like those when the update rolls, the computer goes into reboot and does not return back. You have to reinstall the OS, and this is a waste of time and downtime. Therefore, I turned them off a long time ago as a terrible evil.
Security, if we talk about it, does not begin with updates, but in general with a more precise formulation of this term. What do we want to get out. Well, oddly enough, with complete bans on all software that can be run that is not related to work. Particularly for your bookkeeping. In my domain, absolutely everything is forbidden for boos to start, except for working programs. The result of these events is 5 years of completely stable operation, and no problems. Windows - 7 x64 with SP1 and no updates, everything is blocked. And all these alleged bugs and holes are just an empty phrase.