The Scan Machine page schedules scans to search for missing patches on each managed machine. Scanning takes very little resources and can be safely scheduled to run at any time of day. The scanning operation does not impact users at all.
System and network security depends on all your machines having the latest security patches applied. Microsoft typically releases patches on Tuesdays. Security and critical patches are typically released on the second Tuesday of the month (Patch Tuesday), and non-security and non-critical patches are typically released on the third and/or fourth Tuesdays of the month, but these schedules are not guaranteed. To ensure your machines are updated you should scan all managed machines on a daily basis.
Scanning the KServer
To scan the KServer, you must install an agent on the KServer. Once installed, you can scan the KServer just like any other managed machine.
You can filter the display of machine IDs on any agent page using the following options in View Definitions.
Remind me when machines need a patch scan scheduled
If checked, a warning message displays the number of machine IDs not currently scheduled. The number of machine IDs reported depends on the Machine ID / Group ID filter and machine groups the user is authorized to see using System > Scope.
Click Schedule to display the Scheduler window, which is used throughout the VSA to schedule a task. Schedule a task once or periodically. Each type of recurrence—Once, Hourly, Daily, Weekly, Monthly, Yearly—displays additional options appropriate for that type of recurrence. Periodic scheduling includes setting start and end dates for the recurrence. Not all options are available for each task scheduled. Options can include:
Click Cancel to cancel execution of this task on selected managed machines.
Click Run Now to run this task on selected machine IDs immediately.
Select All/Unselect All
Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.
These icons indicate the agent check-in status of each managed machine:
Online but waiting for first audit to complete
Agent online and user currently logged on. Icon displays a tool tip showing the logon name.
Agent online and user currently logged on, but user not active for 10 minutes
Agent is currently offline
Agent has never checked in
Agent is online but remote control has been disabled
The agent has been suspended
This timestamp shows when the last scan occurred. When this date changes, new scan data is available to view.
Skip if Machine Offline
If a checkmark displays and the machine is offline, skip and run the next scheduled period and time. If no checkmark displays, perform this task as soon as the machine connects after the scheduled time.
This timestamp shows the next scheduled scan. Overdue date/time stamps display as red text with yellow highlight.
If recurring, displays the interval to wait before running the task again.