Server OS patching - Security Only or Quality Rollups? Im just starting out with the enterprise patching and have setup my policy and WSUS for patching my servers.  Non Critical servers will install and reboot weekly and critical servers will be manually patched for the time being (testing BatchPatch at the moment).

I have a question around Security Only or Quality Rollup patches.  WSUS approves both so my servers naturally show both as available.  What is the best practice for servers?  Is there any harm in installing both, or should i decline one or the other?

Do people only patch Security and decline the Quality Rollups?