PENDING SCCM in Azure - WSUS / Software Distribution

[DPackard]

Good day,

We have recently moved our on premise environment up to Azure and have noticed that due to latency, patching and imaging are not working as it should. Also we are getting charged every time we image our machines or send out updates or packages. My thought was to build a DP on Premise to conduct all imaging / package deployment / windows update etc. but what would be the best way to set that up?

• Do I remove WSUS from the current Primary SCCM Server and set up a new instance on the new DP? That would mean installing SQL, IIS Role, WSUS Role and then configuring the SUP role on the DP and removing everything from Primary SCCM Server.
• Do I add the Software Update Point role on the DP and then push the updates/packages to there and from the DP it would then distribute them? (would still get lots of egress costs)
• Do I have to create a secondary site rather then a DP to get the desired effect of using this for all Software Updates / Imaging / Package distribution?

How are environment looks now is as follows:
Primary Server - Server 2022 and SQL 2022 with IIS and WSUS installed and Software Update Point Role



How I was thinking it would look like.

I tried to remove the WSUS role already and add it to the DP but it didn't seem to work and it broke the management point.

Any suggestions are greatly appreciated.

Thanks,
Derrick