{"id":5737,"date":"2020-04-29T20:11:48","date_gmt":"2020-04-29T19:11:48","guid":{"rendered":"https:\/\/www.n-able.com\/?p=5737"},"modified":"2022-06-14T15:19:52","modified_gmt":"2022-06-14T14:19:52","slug":"patching-automation-best-practices-part-one","status":"publish","type":"post","link":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one","title":{"rendered":"Patching Automation Best Practices\u2014Part One"},"content":{"rendered":"<div class=\"field field--name-body field--type-text-with-summary field--label-hidden field--item\">\n<p>This two-part blog series looks at some of the best practices for patching\u2014combining what we usually recommend and what we see our successful partners doing. While this blog series looks at best practices for patching, if you\u2019d like more specific information on how to implement them in your business, we\u2019ll be releasing courses for\u00a0<a href=\"https:\/\/www.solarwindsmsp.com\/products\/rmm?promo=blog\" target=\"_blank\" rel=\"noopener\">SolarWinds<sup>\u00ae<\/sup>\u00a0RMM<\/a>\u00a0and\u00a0<a href=\"https:\/\/www.solarwindsmsp.com\/products\/n-central?promo=blog\" target=\"_blank\" rel=\"noopener\">N&#8209;central<sup>\u00ae<\/sup><\/a>\u00a0in the near future.<\/p>\n<p>Windows updates are a staple for all managed services providers (MSPs). As a result, this process is often either very time consuming or easily overlooked. In either case, it can create issues for MSPs\u2014but it doesn\u2019t have to be a major pain point.<\/p>\n<p>In most remote monitoring and management (RMM) platforms patching is flexible, easy to use, and can be configured once for most or all devices (though the amount of time this takes may vary based on which RMM platform you use).<\/p>\n<p>I\u2019ve found that partners patch in different ways. Today, we\u2019ll break the process into five main phases and document each separately:<\/p>\n<ol>\n<li>Finding new patches<\/li>\n<li>Approving patches for install<\/li>\n<li>Downloading the patches<\/li>\n<li>Installing the patches<\/li>\n<li>Rebooting the computer<\/li>\n<\/ol>\n<p>We\u2019ll cover the first three phases in part one of the blog series and cover phases four and five in part two.<\/p>\n<h3><b>Finding new patches<\/b><\/h3>\n<\/div>\n<div class=\"field field--name-field-blog-paragraphs field--type-entity-reference-revisions field--label-hidden field--items\">\n<div class=\"field--item\">\n<div class=\"paragraph paragraph--type--blog-section paragraph--view-mode--default clearfix\">\n<div class=\"sidebar-width-40\">\n<div class=\"field field--name-field-sidebar field--type-entity-reference-revisions field--label-hidden field--item\">\n<aside class=\"paragraph-align-right pull-right paragraph paragraph--type--blog-cta paragraph--view-mode--default\">\n<div class=\"explore-box quick-cta\">\n<div id=\"solar-features-trial\"><\/div>\n<\/div>\n<\/aside>\n<\/div>\n<\/div>\n<div class=\"blog-section-content\">\n<p>Detecting new patches is the first phase. Depending on your RMM tool, you may have the option to detect patches whenever you want based on a custom schedule, or you may be forced into a fixed schedule.<\/p>\n<p>Here are some of the things we typically see our partners do if they have the flexibility to customize it:<\/p>\n<ul>\n<li>check several times per day (even hourly)<\/li>\n<li>check daily<\/li>\n<li>check a few times per week or weekly<\/li>\n<li>check every month or quarter, whenever they intend to do them<\/li>\n<\/ul>\n<p>Detection is something you may want to do on a different schedule depending on your needs and depending on devices. If we go back a few years, Windows XP and Windows 7 patch detection was fairly CPU intensive, so patching less frequently was preferable. From Windows 8, patch detection has become much more efficient, and usually not noticeable by the end user\u2014so running it more frequently is not as much of an issue.<\/p>\n<p>My personal recommendation is to detect daily on desktop and twice a week or daily on servers. Some people will say this is overkill. But with Microsoft releasing more and more updates outside the patch Tuesday schedule, a daily check will enable you to detect new patches as they come out. This also allows you to detect patches on devices that are not often online.<\/p>\n<h3><b>Patch approvals<\/b><\/h3>\n<p>Approaches to approving patches vary widely. Here are some approaches we\u2019ve seen:<\/p>\n<ul>\n<li>Approve all patches by hand<\/li>\n<li>Approve security and critical patches automatically and others manually<\/li>\n<li>Approve all patches automatically<\/li>\n<\/ul>\n<p>In any of the above scenarios, techs either decline drive updates, approve them, or approve some of them.<\/p>\n<p>Knowing this, it\u2019s tricky to recommend a unique way to move forward. However, most people auto-approve critical and security updates and manually approve several other patches. While lots of MSPs decline drivers, I do not typically recommend this practice as drivers often contain very important security fixes.<\/p>\n<p>If your RMM supports it, you can choose to setup a delayed approval, which is also recommended. It means you can approve patches and install them a minimum of \u201cX\u201d days after discovering them. We recommend delaying approval on most devices. That way you let the early birds get patches on day one and report any bugs, giving Microsoft and third parties the time to pull the patch if it\u2019s not working, and giving you time to manually decline it if desired.<\/p>\n<p>If you have a test group, the test group probably shouldn\u2019t delay approvals so the updates install as quickly as possible.<\/p>\n<p>With manual approval, I often hear people approve them by hand. But upon deeper inspection, the same people simply approve everything\u2014or almost everything\u2014giving a false sense of control over the process. If that is what you do, you may want to consider auto approving some or all of them to save yourself the time of pressing the button to approve them.<\/p>\n<p>I still recommend reading up on the updates each month from an industry expert like our\u00a0<a class=\"ext\" href=\"https:\/\/twitter.com\/cybersec_nerd\" target=\"_blank\" rel=\"noopener noreferrer\">security nerd Gill Langston<\/a>\u00a0to ensure you know what updates are coming out and what you may want to delay, install immediately, or decline.<\/p>\n<h3><b>Downloading the patches<\/b><\/h3>\n<p>Downloading patches is usually done ahead of time. Most RMM platforms support pre-downloading patches at a convenient time, either to the end device or to a central device to minimize bandwidth on the customer\u2019s network.<\/p>\n<p>If your RMM supports it, use a central device (probe) to download the patches once per site. In recent years, some patches have been over 4GB, so caching them centrally can make a big difference on a site with 100 devices.<\/p>\n<p>Next, consider when you want to pre-download. Some RMMs will download as soon as they\u2019re approved, but if your RMM supports scheduling, try to schedule during lower consumption time, like at night\u2014which is usually outside backup windows and peak network usage.<\/p>\n<p>While we\u2019ve covered a lot of information, there\u2019s still more best practices to go over so stay tuned for my next article. We\u2019ll cover installing patches, rebooting the end devices, and monitoring and reporting on patches.<\/p>\n<p>&nbsp;<\/p>\n<p><strong>If you\u2019ve created an automation policy and would like to share it with the community, please feel free to email me at\u00a0<a href=\"mailto:marcandre.tanguay@solarwinds.com\">marcandre.tanguay@solarwinds.com<\/a>.\u00a0<\/strong><\/p>\n<p><strong>As always, don\u2019t forget to go look in the automation cookbook at\u00a0<a href=\"https:\/\/www.solarwindsmsp.com\/cookbook\" target=\"_blank\" rel=\"noopener\">www.solarwindsmsp.com\/cookbook<\/a>\u00a0if you\u2019re interested in other automation policies, script checks, and custom services.<\/strong><\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p><em>Marc-Andre Tanguay is Head Automation Nerd. You can follow him on Twitter at\u00a0<a class=\"ext\" href=\"https:\/\/twitter.com\/automation_nerd\" target=\"_blank\" rel=\"noopener noreferrer\">@automation_nerd<\/a><\/em><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.<\/p>\n","protected":false},"author":26,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-5737","post","type-post","status-publish","format-standard","hentry","topic-automation","topic-head-nerds","topic-patch-management"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.2 (Yoast SEO v27.2) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Patching Automation Best Practices\u2014Part One - N-able<\/title>\n<meta name=\"description\" content=\"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\" \/>\n<meta property=\"og:locale\" content=\"pt_BR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Patching Automation Best Practices\u2014Part One - N-able\" \/>\n<meta property=\"og:description\" content=\"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\" \/>\n<meta property=\"og:site_name\" content=\"N-able\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/NableMSP\" \/>\n<meta property=\"article:published_time\" content=\"2020-04-29T19:11:48+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-06-14T14:19:52+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/03\/share-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Marc-Andre Tanguay\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Nable\" \/>\n<meta name=\"twitter:site\" content=\"@Nable\" \/>\n<meta name=\"twitter:label1\" content=\"Escrito por\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marc-Andre Tanguay\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. tempo de leitura\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\"},\"author\":{\"name\":\"Marc-Andre Tanguay\",\"@id\":\"https:\/\/www.n-able.com\/pt-br#\/schema\/person\/e9aad1eacfec78bcd30647fc3df38ea5\"},\"headline\":\"Patching Automation Best Practices\u2014Part One\",\"datePublished\":\"2020-04-29T20:11:48+01:00\",\"dateModified\":\"2022-06-14T14:19:52+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\"},\"wordCount\":986,\"publisher\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br#organization\"},\"articleSection\":[\"Automation\",\"Head Nerds\",\"Patch Management\"],\"inLanguage\":\"pt-BR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\",\"url\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\",\"name\":\"Patching Automation Best Practices\u2014Part One - N-able\",\"isPartOf\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br#website\"},\"datePublished\":\"2020-04-29T20:11:48+01:00\",\"dateModified\":\"2022-06-14T14:19:52+00:00\",\"description\":\"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#breadcrumb\"},\"inLanguage\":\"pt-BR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Automation\",\"item\":\"https:\/\/www.n-able.com\/pt-br\/blog\/category\/automation\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Patching Automation Best Practices\u2014Part One\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.n-able.com\/pt-br#website\",\"url\":\"https:\/\/www.n-able.com\/pt-br\",\"name\":\"N-able\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.n-able.com\/pt-br?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pt-BR\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.n-able.com\/pt-br#organization\",\"name\":\"N-able\",\"url\":\"https:\/\/www.n-able.com\/pt-br\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/www.n-able.com\/pt-br#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg\",\"contentUrl\":\"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg\",\"width\":\"1024\",\"height\":\"1024\",\"caption\":\"N-able\"},\"image\":{\"@id\":\"https:\/\/www.n-able.com\/pt-br#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/NableMSP\",\"https:\/\/x.com\/Nable\",\"https:\/\/www.linkedin.com\/company\/n-able\",\"https:\/\/www.youtube.com\/channel\/UClnp77HHg4aME-S-3fWQhFw\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.n-able.com\/pt-br#\/schema\/person\/e9aad1eacfec78bcd30647fc3df38ea5\",\"name\":\"Marc-Andre Tanguay\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pt-BR\",\"@id\":\"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g\",\"caption\":\"Marc-Andre Tanguay\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Patching Automation Best Practices\u2014Part One - N-able","description":"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one","og_locale":"pt_BR","og_type":"article","og_title":"Patching Automation Best Practices\u2014Part One - N-able","og_description":"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.","og_url":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one","og_site_name":"N-able","article_publisher":"https:\/\/www.facebook.com\/NableMSP","article_published_time":"2020-04-29T19:11:48+00:00","article_modified_time":"2022-06-14T14:19:52+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/03\/share-image.jpg","type":"image\/jpeg"}],"author":"Marc-Andre Tanguay","twitter_card":"summary_large_image","twitter_creator":"@Nable","twitter_site":"@Nable","twitter_misc":{"Escrito por":"Marc-Andre Tanguay","Est. tempo de leitura":"5 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#article","isPartOf":{"@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one"},"author":{"name":"Marc-Andre Tanguay","@id":"https:\/\/www.n-able.com\/pt-br#\/schema\/person\/e9aad1eacfec78bcd30647fc3df38ea5"},"headline":"Patching Automation Best Practices\u2014Part One","datePublished":"2020-04-29T20:11:48+01:00","dateModified":"2022-06-14T14:19:52+00:00","mainEntityOfPage":{"@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one"},"wordCount":986,"publisher":{"@id":"https:\/\/www.n-able.com\/pt-br#organization"},"articleSection":["Automation","Head Nerds","Patch Management"],"inLanguage":"pt-BR"},{"@type":"WebPage","@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one","url":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one","name":"Patching Automation Best Practices\u2014Part One - N-able","isPartOf":{"@id":"https:\/\/www.n-able.com\/pt-br#website"},"datePublished":"2020-04-29T20:11:48+01:00","dateModified":"2022-06-14T14:19:52+00:00","description":"Best practices for managed service providers (MSPs) to employ when running patches on their customers\u2019 networks.","breadcrumb":{"@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#breadcrumb"},"inLanguage":"pt-BR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.n-able.com\/pt-br\/blog\/patching-automation-best-practices-part-one#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Automation","item":"https:\/\/www.n-able.com\/pt-br\/blog\/category\/automation"},{"@type":"ListItem","position":2,"name":"Patching Automation Best Practices\u2014Part One"}]},{"@type":"WebSite","@id":"https:\/\/www.n-able.com\/pt-br#website","url":"https:\/\/www.n-able.com\/pt-br","name":"N-able","description":"","publisher":{"@id":"https:\/\/www.n-able.com\/pt-br#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.n-able.com\/pt-br?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pt-BR"},{"@type":"Organization","@id":"https:\/\/www.n-able.com\/pt-br#organization","name":"N-able","url":"https:\/\/www.n-able.com\/pt-br","logo":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/www.n-able.com\/pt-br#\/schema\/logo\/image\/","url":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","contentUrl":"https:\/\/www.n-able.com\/wp-content\/uploads\/2021\/02\/logo-n-able-vertical-dark.svg","width":"1024","height":"1024","caption":"N-able"},"image":{"@id":"https:\/\/www.n-able.com\/pt-br#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/NableMSP","https:\/\/x.com\/Nable","https:\/\/www.linkedin.com\/company\/n-able","https:\/\/www.youtube.com\/channel\/UClnp77HHg4aME-S-3fWQhFw"]},{"@type":"Person","@id":"https:\/\/www.n-able.com\/pt-br#\/schema\/person\/e9aad1eacfec78bcd30647fc3df38ea5","name":"Marc-Andre Tanguay","image":{"@type":"ImageObject","inLanguage":"pt-BR","@id":"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c30ca969acb05f4b38743793d0f087676b464e787ea6d4c9f359509b272cdb1d?s=96&d=mm&r=g","caption":"Marc-Andre Tanguay"}}]}},"_links":{"self":[{"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/posts\/5737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/comments?post=5737"}],"version-history":[{"count":0,"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/posts\/5737\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.n-able.com\/pt-br\/wp-json\/wp\/v2\/media?parent=5737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}