Next Topic

Previous Topic

Book Contents

Configuring Patch Management

Analyzing Patch Status

You can determine the patch status of managed machines using the following pages:

  • Determine what patches are missing on managed machines using Scan Machine.
  • Display a summary view of installed, missing and denied patches for each managed machine using Patch Status.
  • Display a detailed view of patch scan results for each managed machine using Patch History.

Configuring Patch Management

The following configuration pages apply to Initial Update, Automatic Update, Patch Update, and Machine Update unless indicated otherwise.

  • Optionally create a patch policy using Patch Mgmt > Create/Delete. Patch policies are required to set approval policies. Applies to Automatic Update and Initial Update.
  • Optionally assign machine IDs to a patch policy using Patch Mgmt > Membership. Applies to Automatic Update and Initial Update.
  • Optionally set patch approval policies using Approval by Policy, Approval by Patch or KB Override. Applies to Automatic Update and Initial Update.
  • Optionally change the reboot policy for machine IDs using Reboot Action. Applies to Automatic Update, Patch Update and Machine Update.
  • Optionally change the File Source location machines use to download patches.
  • Optionally change command line parameters for installing selected patches using the Command Line page.
  • Optionally change the URL patches are downloaded from using Patch Location.
  • Optionally configure alerts for patch-related events using Patch Alert.
  • Optionally enable or disable Windows Auto Update on managed machines.
  • If a credential has been created for a machine ID, then all patches are installed on that machine ID using the rights of that credential. A credential must be defined to use the Office Source page.
  • Optionally create an alternate source location for Office patches using Office Source.
  • Optionally run scripts before or after Initial Update. Applies to Initial Update only.