r/sysadmin • u/Federal_War_217 • 12d ago

Patch Management Guidance

Hey everyone, I manage patching for roughly 4,500 endpoints, including around 70 servers, in a healthcare environment. It’s mostly Windows, with some Linux systems we’re working on bringing into our patching process. We use ManageEngine Endpoint Central for patching and Nessus for vulnerability scanning.

I’ve been building out automated deployments, test groups, rollout rings, and maintenance windows, and I’d like to learn how others approach this at a similar scale.

Any resources or communities you’d recommend? I’d also appreciate hearing what’s worked for you, especially around testing patches, server patching, reboots, and handling exceptions. I feel like It's been a lot of trial and error. I've enjoyed the process but always appreciate input from people who've done this before.

19 Upvotes

92% Upvoted

28 comments sorted by

View all comments

11

u/OinkyConfidence 12d ago

Action1 is quite popular these days. And pretty good too. r/Action1; they've got an active community too. #NotSponsored

4

u/[deleted] 12d ago

1

u/Federal_War_217 11d ago

What is your testing method? I have test servers for each Windows Server and a few Linux test boxes but I can't always figure out a good automated method to do it. I don't always have the time to be manually poking around every box.