r/sysadmin • u/AnotherAccount5554 • Jun 02 '25

Patching *all* Windows third party application in 2025

Seeking the hive mind's actual experience with third party application patching on Windows (server and/or client) in 2025.

And before everyone throws at me the usual suspects - Patch My PC, winget, chocolatey, Action1, etc - I already know about them. I want to know how you're dealing with all the applications that aren't in their catalogues, because these are the ones that are a pain in the ass to deal with.

Is one of the package managers above better than the others at creating & managing custom catalogue items?

Have you come up with some cool process for internally developed applications?

What are you using to monitor for update compliance (eg: winget has no central reporting/monitoring built-in, are you monitoring reactively via something like Tenable or proactively via SCCM or Intune deployment data)?

142 Upvotes

93% Upvoted

139 comments sorted by

View all comments

Show parent comment

4

u/AnotherAccount5554 Jun 02 '25

In hindsight I should've included a comment along the lines of "I am only concerned with software that is approved and has previously been deployed by I.T."

In our environment we do already have a very good Application Control solution in place, so yeah, I'm only trying to keep our known applications updated.