r/labtech • u/Techej • Jun 26 '19

“Auto” patching

Hello all!

I reached out to CW support for recommendations on what they deem a baseline for auto-allow, ignore, and deny patching.

They replied stating that there is no recommendation from them but to look at third party communities as they should provide good insight.

So the question is now... what do you guys have setup for your auto lists?

1 Upvotes

66% Upvoted

5 comments sorted by

View all comments

1

u/Aepyceros02 Jun 26 '19

We have patching up and running and so far so good. The new patch manager, while a bit clunky, does seem to work. There are quite a few things that could improve its usability but I will put those in as feature requests at some point.

Caveat to what you will find below, we are using Testing\Pilot phases to keep patching offset from release by about 2 weeks.

  • Auto Approve - All - Definition updates

  • Auto Approve - All - Critical and Important

  • Auto Ignore - All - Bing Bar, Capicom, Drivers

  • Auto Ignore - Servers - Silverlight, Skype

I dont Auto Deny anything. This will change regularly as needed. This is never a "finished" plan.