WSUS

 i want use wsus patch management whole organisation around 14 25 location on india.

i want centralize wsus @ 1 location best practises wsus deployment .

do need install downstream server remote location.

---

that depends on web connection @ each location, , if have secure vpn between each sub-office , main office.

i have similar set-up.  in case, have poor (expensive) broadband in many locations, a reliable vpn.  have wsus server in each location have vpn, , servers set in replica mode take update approvals parent wsus server. i have each child server set download updates directly microsoft instead of parent (the default setting parent - , would clog up my vpn).

if you, however, have broadband link offices , not many clients (10-50), might possible have clients in offices report directly wsus server in head office. think rare situation, , consume lot of bandwidth since each client downloading every update on vpn parent wsus server.

without more information, advise set wsus server in each location. 

you might want @ intune, if have broadband link @ each office.  not option me, since want store update packages on local server in each office minimise downloading, , intune, each client downloads individual update directly internet. believe costs, , wsus free.  wsus best microsoft product have ever worked with.

there plenty read on technet basics of deployment. http://technet.microsoft.com/en-us/library/dd939796(v=ws.10).aspx

you might interested in using method clients share downloads each other..

http://technet.microsoft.com/en-us/library/dd939927(v=ws.10).aspx

Windows Server  >  WSUS