Patching Best Practices
What is the best way to setup patching to just workstations no servers? And have deploy automatically every patch Tuesday.
Answers (1)
since KACE checks the patches beforehand, they are not (yet) avaiable on a tuesday but usually (deepending on your location) wed or thur
Please be aware that if you ask 10 people after their perfect update plan you will get 1000 answers which are different to each other
I suggest some operations daily to have always the latest info in the appliance for reporting
1. setup labels for your workstations
2. let the signatures download (daily at night)
3. run a detect on them (daily)
4. let the patches download (daily "after signature download")
5. run a deploy (thursdays and fridays at lunch when all systems are online and let them reboot at the end of their shifts)
Two good videos are:
https://support.quest.com/kace-systems-management-appliance/8.0.318/videos/25904
https://support.quest.com/kace-systems-management-appliance/10.1/videos/26311
Even if the first one is for an EOL version (and discussing the old and no more used patching engine) it is still valid. The management of the patch engine is the same, only some names have been changed.
Please be aware, that you need a valid license and 10.0 or higher to be able to patch
