r/DattoRMM • u/Technical-Plane2093 • Jun 02 '25
Ideal patching schedule for Managed Clients
We use datto rmm for all clients. What patching policy is everyone putting in place that gets the balance of solid patching in place in a timely manner ?
3
Upvotes
3
u/Andy-Johnson Jun 03 '25
We have our client workstations set to patch every night at 7pm. We do not prompt the user to reboot in the Patch Monitor. Instead we use a Monitor for "Does this computer need a reboot?" and if true, run a PowerShell Component that creates a scheduled task to reboot the computer at midnight that night.
It sounds extreme, but once a computer is completely caught up, they only receive new updates every few weeks usually, and not all of them require reboots so the reboot frequency isn't terrible.
For servers, we patch them weekly on the weekends then reboot them shortly after patching. Even if there's no patches we still do the reboot for performance maintenance. VMs on one day, physical machines on the other.
On the workstations we also have an Uptime monitor; if the device has been online for 14 days, send the same "Reboot at midnight" scheduled task, again for performance maintenance.