Why is patching edge gear still so ticket-driven?
A serious vulnerability can still trigger approvals, scheduled windows, and manual work across a fleet. Is automated rollout practical for edge infrastructure, and what tends to keep teams…
patch management
Why Does WSUS Show an Older Windows Version Than Intune?
I manage about 1,500 devices enrolled in Intune, but WSUS is still our primary patching system because our organization has limited internet bandwidth. Some devices report different operating…
Why do Intune and WSUS show different Windows build numbers?
I have about 1,500 devices enrolled in Intune, but WSUS is still our primary patching system. Some devices show different OS versions in the two systems—for example, Intune…
PDQ Deploy and Inventory vs. ManageEngine Endpoint Central for Air-Gapped Patching
We currently use WSUS and BatchPatch for operating system and third-party updates, but I'm evaluating replacements. Our environment is air-gapped, so I download third-party patches from a separate…
PDQ Deploy and Inventory vs. ManageEngine Endpoint Central for Air-Gapped Patch Management
We're currently using WSUS with BatchPatch to handle operating system and third-party updates, but I'm evaluating replacement options. Our environment is air-gapped, so I use a separate internet-connected…
How should IT support faculty-managed Linux servers and teaching labs?
Our institution has several faculty-managed Linux research servers plus two teaching labs with Windows/Ubuntu dual-boot systems. Faculty have traditionally had substantial administrative control to support specialized research and…
What’s a practical patch-management setup for an air-gapped network?
We currently use WSUS and BatchPatch to deploy Windows and third-party updates, but I'm looking for a more robust and reasonably priced option for about 200 endpoints. The…
What’s a practical patch management setup for a 200-device air-gapped network?
We currently use WSUS and BatchPatch to deploy Windows and third-party application updates. The setup works, but I'm looking for something more robust and easier to audit. The…
Action1 vs. N-able: Which Is Better for Patching and Remote Support?
We previously used Action1 extensively and had a good experience with it. Our systems engineer is more familiar with N-able, so we're comparing the two for a relatively…
Do Critical Windows Server Patches Require a Change Request?
My organization is extremely cautious about server downtime and reboots. We patch roughly once a month, but about 60% of our servers are excluded from automatic patching, leaving…
How should you answer an interview question about patching frequency?
I was asked during an interview how often I update or patch systems. I answered, "It depends on what you're updating, but I update as often as needed."…
How Often Should Systems Be Updated and Patched?
I was asked during an interview how often I update or patch systems. I answered that it depends on what is being updated and that I patch things…
How Do You Update Edge on Internet-Isolated Windows Server 2025 Domain Controllers?
With Microsoft Edge integrated into Windows Server 2025, what is the recommended way to keep it patched on domain controllers that are intentionally blocked from direct internet access?…
How Are You Managing the Surge in Security Patches?
Patch volumes are getting unusually high. Oracle's August critical patch update included 925 CVEs, while Microsoft's August Patch Tuesday had 398 after July's 570. Vendors are increasingly using…
Affordable Alternatives for Software Deployment and Windows Patch Management
I'm the sysadmin at a small company with roughly 280 users. In my previous roles, I used Baramundi for hardware and software inventory, software deployment, and Windows patch…
Should I use a second tool to fix Intune patching issues?
How is everyone managing Windows and third-party updates? I currently have Windows Autopatch rings configured through Intune, but some machines remain behind with updates that never seem to…
What platforms work well for on-prem service desk and endpoint management?
We're looking for recommendations for replacing or supplementing KACE SMA for service desk and endpoint management. Performance has been disappointing, and we recently found that it can become…
Affordable Alternatives for Software Inventory and Windows Patch Management
I'm responsible for IT at a small company with roughly 280 users. In my previous sysadmin roles, I used Baramundi for software and hardware inventory, software deployment, and…
How do you handle employees who refuse to reboot after updates?
I've had several support tickets from the same department where employees refused to restart their computers after updates. One person said they had 47 browser tabs open and…
What’s the best way to deploy and update Claude Desktop with Intune and RoboPack?
I'm deploying Claude Desktop through Microsoft Intune with RoboPack handling patch management. The application is packaged as an MSIX and installed in machine scope. The deployment works, but…