Next Topic

Previous Topic

Book Contents

Machine Update

Patch Mgmt > Machine Update

The Machine Update page manually installs Microsoft patches on individual machines. Machine Update overrides the Patch Approval Policy but obeys the Reboot Action policy. If you're using Automatic Update, then Machine Update is used on an exception basis. Machine Update is often used to test a new patch prior to approving it for general release to all machines. See Methods of Updating Patches, Configuring Patch Management, Patch Processing, Update Classification and Patch Failure for a general description of patch management.

Using Machine Update

  1. Click a machine ID to display all patches missing on that machine. Patches are grouped by update classification first and knowledge base article number second.

The Product column helps identify the product category associated with a specific patch. If a patch is used across multiple operating system families (i.e., Windows XP, Windows Server 2003, Vista, etc.), the product category is Common Windows Component. Examples include Internet Explorer, Windows Media Player, MDAC, MSXML, etc.

  1. Optionally click the KB Article link to display a Details page about the patch. The Details page contains a link to display the knowledge base article.
  2. Optionally click a Security Bulletin link to review a security bulletin, if available. Patches classified as security updates have a security bulletin ID (MSyy-xxx).
  3. Check the box next to patches you want installed on the selected machine ID.
  4. Select install parameters.
  5. Click the Schedule button to install patches using the install parameters.
  6. Click the Cancel button to remove any pending patch installs.

Superceded Patches

A patch may be superceded and not need to be installed. See Superceded Patches for more information.

Schedule

Click Schedule to schedule the update of selected missing patches on a machine ID using the schedule options previously selected.

Date/Time

Enter the year, month, day, hour, and minute to schedule this task.

Cancel

Click Cancel to cancel execution of this task on selected managed machines.

Skip if Machine Offline

Check to perform this task only at the scheduled time, within a 15 minute window. If the machine is offline, skip and run the next scheduled period and time. Uncheck to perform this task as soon as the machine connects after the scheduled time.

Hide patches denied by Patch Approval

If checked, hides patches denied patch approval. Patches with the status Pending Approval are considered denied by Patch Update.

Select All/Unselect All

Click the Select All link to check all rows on the page. Click the Unselect All link to uncheck all rows on the page.

(Status)

The following status messages can appear next to a patch:

  • Pending
  • Install Failed - See Patch Failure.
  • Awaiting Reboot
  • User not logged in
  • User not ready to install
  • Install Failed - Missing Network Credential
  • Install Failed - Invalid Network Credential or LAN Server Unavailable
  • Install Failed - Invalid Credential
  • Missing
  • Denied by Patch Approval
  • Denied (Pending Patch Approval)
  • Manual install to VSA database server only - Applies to SQL Server patches on the database server where our database is hosted
  • Manual install to KServer only - Applies to Office or any "install-as-user" patches on the KServer
  • Patch Location Pending - Applies to patches with an invalid patch location. See Invalid Patch Location Notification in System > Configure.
  • Missing Patch Location
  • Ignore