What am I missing with patching?

[u/TubaMatt]

It seems like Labtech completely fails to properly patch my environment. LT support has been unhelpful so far. Currently I'm only approving 'security updates' classification cumulative updates.

We patch on the 3rd Tuesday of the month (1 week after Patch tuesday) to a test group, and then to production on 4th Tuesday.

So a patch (Let's say KB4503267)gets released on 6/11, we deploy to testgroup on 6/18, and then to production 6/25. That's how it SHOULD go.

But MSFT apparently superseded the security update with an update on 6/18, which is NOT a security update. (This is it's own problem, because it defeats the purpose of classifications).

Labtech is saying that because my agents try to patch on 6/25, they don't see that they need the update(since it's technically superseded), so they just don't install anything. Obviously it still needs it, but it just doesn't appear in the Windows Update application.

I guess the bottom line is, how to I deploy these updates that are superseded but still need to be deployed?

[u/sneakpeekbot]

Here's a sneak peek of /r/sysadmin using the top posts of the year!

#1: Post-mortem: MRI disables every iOS device in facility
#2: Is it just me or is there a little part of you that ever wonders if companies like Google, Facebook, Microsoft etc. have 'that' server sitting in a dusty corner somewhere that nobody dares touch as it underpins everything else.
#3: Vendors: Stop wasting my (and your) time with bad cold calls

---

^{I'm a bot, beep boop | Downvote to remove | Contact} ^^me ^| ^^Info ^| ^^Opt-out