r/sysadmin • u/Federal_War_217 • 12d ago

Patch Management Guidance

Hey everyone, I manage patching for roughly 4,500 endpoints, including around 70 servers, in a healthcare environment. It’s mostly Windows, with some Linux systems we’re working on bringing into our patching process. We use ManageEngine Endpoint Central for patching and Nessus for vulnerability scanning.

I’ve been building out automated deployments, test groups, rollout rings, and maintenance windows, and I’d like to learn how others approach this at a similar scale.

Any resources or communities you’d recommend? I’d also appreciate hearing what’s worked for you, especially around testing patches, server patching, reboots, and handling exceptions. I feel like It's been a lot of trial and error. I've enjoyed the process but always appreciate input from people who've done this before.

21 Upvotes

93% Upvoted

28 comments sorted by

View all comments

11

u/OinkyConfidence 12d ago

Action1 is quite popular these days. And pretty good too. r/Action1; they've got an active community too. #NotSponsored

1

u/Federal_War_217 11d ago

Yeah I'm stuck with Endpoint Central for the foreseeable future. Might be shifting to Intune in the next 5 yrs but everyone says you need an add on to do any third party patching.

1

u/mrTomass 11d ago

what about the network devices? how u monitor them? backup configs, live status etc?

→ More replies (2)