I work for a fortune 100 company in a large environment. The only practical way to maintain versions and patching is to enable the CommServe to automatically download new patches. However, maintaining version control is next to impossible.
My install cache is from the January 2012, which is sp 3a. The commserve is at 4b. When you enable auto download of new patches, and hotfixes, it automatically downloads new service packs when they become available. While it is necessary to keep downloading the latest fixes for service packs in use, it causes problems when it downloads service packs beyond the environment and places them in the install cache that is used to install updates. For example, when I install a new client from the install cache to sp 3a, and then turn around and run install updates, it will load SP 6a on the client. Now my environment is out of sync. And I now have a version of software in my environment without an approved change control for it.
For change control purposes, and service consistency of the application, we need a setting in the control panel, or in the groups...somewhere which will allow us to choose what Service pack we are on for the entire envisonment or for Commserve, Media Agents, CI, various applications like archiving and complaince, indiviual servers, etc.
This is a MAJOR SECURITY breach and a hindrance in our annual audits. In order to recieve certain IT certifications for compliance, a company needs to demonstrate control over change control.