SHA-2 Code Signing Update Prerequisite
Hi everyone I have spent the last few hours reading through the release notes for the latest Windows Updates. What caught my attention is e.g. https://support.microsoft.com/en-za/help/4516033/windows-7-update-kb4516033 where it says that the SHA-2 update (KB4474419) and the SSU must be installed before any other updates are installed. Does Desktop Central / ManageEngine pay attention to these details? I don't get the impression to be honest as all other September updates are available for installation
Microsoft Surface Pro 4
Are there plans to support the Microsoft Surface Pro 4 in DC? Currently you are unable to update firmware/hardware updates from WSUS but can from Microsoft Update. As we don't let our users update from Microsoft Update, we don't get the firmware updates we require. Are we able to download these via Desktop Central?
DC patching not honoring "Deploy after X days from release
We use an automated patching policy whereby a subset of our computers are members of a patch management test group ("PMTG"). That group is not supposed to get those patches until they've been released for seven days. My computer is a member of that group and DC patched it 16.0.13001.20384 this morning when it was only released yesterday (see link below). Is anyone else experience the same? Update history for Microsoft 365 Apps (listed by date) https://docs.microsoft.com/en-us/officeupdates/update-history-microsoft365-apps-by-date
Patch stored location is not available to download the patch from the server error
Hi, I have a new install of Desktop Central, in a workgroup environment. I get the following error on all workstations I have configured: Patch stored location is not available to download the patch from the server. The workstations can browse and reach the patch store folder manually through the network. How can I troubleshoot this? thank you!
System Health Policy?
Quick question for all those who use DC patch management. What is your System Health Policy set too, or what do you feel is a good setting for this? I currently have it set to the following: Thoughts? Opinions? Anyone else care to share theirs? Thank you! Todd
Remote Office Detection criteria Improvement
Hi Team, We been using Desktop central product for over a year and came across one small issue.this issue is related to detection Remote office. When we define scope in scope management and when DC agent\laptop receive IP address in defined scopt then
Integration with SentinelOne
Hi Team . any plans of support or connectors or anytype of integration with SentinelOne for patch management , or stuck with only ManageEngine’s products lineup is locked into the provided capabilities that come out of the box and align to the ro
Endpoint Central - How do you have your Automated Patch Deployment Tasks configured?
Hi all, I'm looking for input on how you are all using Automated Patch Deployments? I would like to automate as much of our patching policy as possible as today, we typically go in once a month to approve patching and a two separate APDs are created.
Patch Tuesday May 2023
Please check latest security patches on Manage Engine
Patching open applications
We consistently have web browsers taking a while to be patched because the application is open during the patching period. When patching office applications, I believe there is an additional pop up asking to close out of office applications. Can this
Errors with Office 365
We seem to have more than our share of errors with Office365 and updates. More commonly, after an Office update it breaks on or more of the products. Mostly outlook will fail to open. After this it seems the fix is to uninstall thesuite and reinstall.
Patch Tuesday Updates: June 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-06 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5061072) (ESU) (CVE-2025-33073) 2025-06 Security Only
KB5060842 failing with "The system cannot find the file specified"
On all my clients Patch ID 41542 2025-06 Cumulative Update for Windows 11 Version 24H2 for x64-based Systems (KB5060842) fails with the error: "The system cannot find the file specified" The Setup event log says: Windows update could not be installed
Update Vulnerability DB Failure after applying v11_4_0_SP-2500_36
Over the weekend I applied patch ManageEngine_Endpoint_Central_11_4_0_SP-2500_36.ppm. The update claimed to complete successfully, but this morning I'm receiving an error when trying to update the vulnerabilities database. I searched for this issue in
Microsoft Defender patch failing
Patching of Microsoft defender keeps failing The latest update for Microsoft Defender (1.429.453.0) with error message "Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing
WINDOWS AUTOPATCH
Hi Microsoft released Hotpach for Windows 11 enterprise OS is it something that can be integrated in Endpoint Central or its too integrated with Intune/Orchestration and cannot be managed by a 3rd party ? thx
The summary tab
The summary tab is opening first when you click on a computer name. It used to be the patches tab that opened when you clicked on the computer name, and they switched after updating to Endpoint Central version 11.4.2516.08. How can I switch it back?
EndPoint Central DataBase Schema Patch MgMt
Hello everyone, could someone provide me with the updated schema of the Patch Mgmt Module? I have it as shown in the attached image, but it seems to me that it is not completely updated.
KB5061768 support
When will the out of band patch for Windows 10 22h2 be supported? Would prefer this one over the one that bluescreens on bitlocker. KB5061768
Vulnerability CVE-2024-43590 identified but suggesting superseded patch. Microsoft Visual C++ 2015-2022 Redistributable - various versions.
Is anyone else experiencing this... Microsoft Visual C++ 2015-2022 Redistributable Current patch level - 14.44.35112.1 is not being identified as required. This affects ALL devices. Vulnerability report is suggesting installing superseded patch 14.40.33816.0
Network driver notification time waiting
Hello, I have a question about updating the network drivers, the notification before the starting deployment has time waiting for 5 minutes, and the question is, we can change this time frame or this cannot be changed? Regards, Marius
Patch Tuesday Updates: May 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-05 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5058429) (ESU) (CVE-2025-30397) (CVE-2025-32706) (CVE-2025-32701)
Using WSUS as the source of update files...
Hi all; My customer prefers to use WSUS in Internet side and Endpoint Central as the intranet side. Is it possible to sync updates from WSUS? Thanks
Unintentional Shutdowns after Patches
Hello, We keep receiving messages from users complaining that their laptops are being restarted or shut down unexpectedly after patches are applied. We have configured a policy for the affected patches: "no notification, no restart." Do we need to change
MySQL Connector 9.3 patch unsupported
Just FYI in case anyone else was looking, EPC is not supporting MySQL Connector 9.3 patch because of software requirements. Even though their 3rd party list still includes this.
The system TPM version is not compatible with Windows 11. (50010
Hi, my systems don’t support TPM. I want to update them via ManageEngine, but I received the following error: "The system TPM version is not compatible with Windows 11. (50010)" Is there any way to bypass this issue?
Can I just have patches delivered to a server but not install them?
We have a group of servers that need to be patched manually because of the need to coordinate the restarts with other servers. Is there a way to automatically deliver the patches that have been approved to the server but not install them. So, they will
Endpoint Central showing application installed
Endpoint Central showing application were installed when there isn't anyone logged in, and when we look at installed programs the apps aren't listed. We have been getting these emails daily. Some say app installed, others say app uninstalled. Some have
Upgrade to Windows 11 version 24H2 with Endpoint Central!
Hello everyone! As you all must be aware, Microsoft has recently rolled out the new 2024 update (version 24H2) for Windows 11. This is the major update for Windows 11, encompassing all the features and fixes from previous cumulative updates in Windows
Multiple versions of Cumulative Updates in same month
I have a Windows 2019 Server that reports this patch is installed: 2025-04 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB505519) But Manage Engine shows that following patch needs applied 2025-04 Cumulative Update for Windows
Google fixes high severity and critical severity vulnerabilities in its Chrome 135.0.7049.95/.96 Stable Channel update
Chrome Stable Channel has been updated to 135.0.7049.95/.96 for Windows,Mac and 135.0.7049.95 for Linux. This update comes with 2 security fixes. The details of the vulnerability fixed are mentioned below: CVE-ID VULNERABILITY SEVERITY CVE-2025-3619 Heap-based
Patch Tuesday Updates: April 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-04 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5055596) (CVE-2025-29824) (ESU) 2025-04 Security Only
Notification to computer owner after patch installation
Hello I would like to automate the notification of the computer's (server) owner and a patch installation. The owner is available in the "Custom Computer Details". Is there any way to achieve this?
Patch Tuesday Updates: March 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-03 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5053995) (ESU) (CVE-2025-24991) (CVE-2025-24985) (CVE-2025-24993)
Google fixes several high severity vulnerabilities in its Chrome 134.0.6998.117/118 Stable Channel update
Chrome Stable Channel has been updated to 134.0.6998.117/118 for Windows and Mac (release in progress). This update comes with 1 security fix. The details of the vulnerability fixed are mentioned below: CVE-ID VULNERABILITY SEVERITY CVE-2025-2476 Use
Deployment of Windows 11 24H2 Bulletin ID MSWU-3640
Windows 11 Readiness Reporting available in build 11.4.2500.17 does not look at the EFI partition size or space available , why is this? Those two factors can cause failure to deploy MSWU-3640. When will we see a fix for this reporting and as part of
This version is not applicable for this target (Feature Update via Windows 11, version 23H2 Enablement Package (22H2 - 23H2) (x64)
Hi! I have some issues to run Feature Update via Windows 11, version 23H2 Enablement Package (22H2 - 23H2) (x64), we recevie "This version is not applicable for this target" on our Windows 11 22H2 machines. But when we download Windows11.0-kb5027397-x64.msu
Google Chrome updates
Every time I install a Google update on a server using Endpoint Central, it installs the new version of the Google updater Internal Service without uninstalling the old version. This causes the server to have multiple services that aren't running, which
Unapproved Patches Are being Deployed Automatically
Central Server : 11.4.2500.05 Behaviour first noticed this morning. Has anyone else noticed this behaviour?
Has something changed with the Desktop Central Agent Service regarding patch mgmt? Our SentinelOne EDR is triggered by some updates
Anyone have this sort of trouble? Some windows updates or others are triggering our SentinelOne EDR software. Sometimes the Threat files are any of these, listed with the "Detecting Engine": Threat Details Detecting Engine 5beceb.rbf ['On-Write Static
Next Page