Automating VS Manual patch install by schedule question/issue
Since i'm new to Desktop Central, I have been reading the documentation and watched a few videos. However I am still a little confused on how the automation of patches works. Right now, i am in the process of cleaning up our environment of missed patches as well as going forward, installing patches on a time based schedule. Currently, this is what I have done: Created test deployment policy. Set Mon- Fri each week, 6am to 5am Initiate deployment is set to Either WOL & Download Patches are checked.
FYI: An excellent resource for watching Microsoft patch releases
This section of AskWoody.com (of Computer World renown) is curated by the venerable Susan Bradley (Microsoft MVP 18 years and running!) https://www.askwoody.com/patch-list-master/ I have a multi-departmental "Patch Management Test Group" that gets all patches 10 days after releas (gives a patch admin time to come off most vacations and put the kibosh on a patch, if necessary). Seven days after that group has had the patches, the patches are auto-approved and released for general application (workstations
Patch scan scheduling
Documentation says to use Patch Mgmt\Automate Patch Deployment\Schedule Patch task...schedule Patch Task is not an option, only Automate Task...from Automate Task, "Scan the Systems to Identify the Missing Patches" is never an option.
CU Patching Issue
I feel Desktop Central is deprecating superseded patches too quickly. I have two machines failing to install 2019-08 CU for Windows Server 2016. 2019-07 CU was approved tested and partially deployed in my environment when it got disabled by the Patch DB Update Wednesday after Patch Tuesday. I had opened a case about this awhile back that Patches that superseded other patches shouldn't disable the prior patch till the new one is approved. Other tools like Altiris handle patching this way. That way
SHA-2 Code Signing Update Prerequisite
Hi everyone I have spent the last few hours reading through the release notes for the latest Windows Updates. What caught my attention is e.g. https://support.microsoft.com/en-za/help/4516033/windows-7-update-kb4516033 where it says that the SHA-2 update (KB4474419) and the SSU must be installed before any other updates are installed. Does Desktop Central / ManageEngine pay attention to these details? I don't get the impression to be honest as all other September updates are available for installation
Microsoft Surface Pro 4
Are there plans to support the Microsoft Surface Pro 4 in DC? Currently you are unable to update firmware/hardware updates from WSUS but can from Microsoft Update. As we don't let our users update from Microsoft Update, we don't get the firmware updates we require. Are we able to download these via Desktop Central?
DC patching not honoring "Deploy after X days from release
We use an automated patching policy whereby a subset of our computers are members of a patch management test group ("PMTG"). That group is not supposed to get those patches until they've been released for seven days. My computer is a member of that group and DC patched it 16.0.13001.20384 this morning when it was only released yesterday (see link below). Is anyone else experience the same? Update history for Microsoft 365 Apps (listed by date) https://docs.microsoft.com/en-us/officeupdates/update-history-microsoft365-apps-by-date
Patch stored location is not available to download the patch from the server error
Hi, I have a new install of Desktop Central, in a workgroup environment. I get the following error on all workstations I have configured: Patch stored location is not available to download the patch from the server. The workstations can browse and reach the patch store folder manually through the network. How can I troubleshoot this? thank you!
System Health Policy?
Quick question for all those who use DC patch management. What is your System Health Policy set too, or what do you feel is a good setting for this? I currently have it set to the following: Thoughts? Opinions? Anyone else care to share theirs? Thank you! Todd
Remote Office Detection criteria Improvement
Hi Team, We been using Desktop central product for over a year and came across one small issue.this issue is related to detection Remote office. When we define scope in scope management and when DC agent\laptop receive IP address in defined scopt then
Integration with SentinelOne
Hi Team . any plans of support or connectors or anytype of integration with SentinelOne for patch management , or stuck with only ManageEngine’s products lineup is locked into the provided capabilities that come out of the box and align to the ro
Endpoint Central - How do you have your Automated Patch Deployment Tasks configured?
Hi all, I'm looking for input on how you are all using Automated Patch Deployments? I would like to automate as much of our patching policy as possible as today, we typically go in once a month to approve patching and a two separate APDs are created.
Patch Tuesday May 2023
Please check latest security patches on Manage Engine
Patching open applications
We consistently have web browsers taking a while to be patched because the application is open during the patching period. When patching office applications, I believe there is an additional pop up asking to close out of office applications. Can this
Errors with Office 365
We seem to have more than our share of errors with Office365 and updates. More commonly, after an Office update it breaks on or more of the products. Mostly outlook will fail to open. After this it seems the fix is to uninstall thesuite and reinstall.
Patch Tuesday Updates: June 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-06 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5061072) (ESU) (CVE-2025-33073) 2025-06 Security Only
KB5060842 failing with "The system cannot find the file specified"
On all my clients Patch ID 41542 2025-06 Cumulative Update for Windows 11 Version 24H2 for x64-based Systems (KB5060842) fails with the error: "The system cannot find the file specified" The Setup event log says: Windows update could not be installed
Update Vulnerability DB Failure after applying v11_4_0_SP-2500_36
Over the weekend I applied patch ManageEngine_Endpoint_Central_11_4_0_SP-2500_36.ppm. The update claimed to complete successfully, but this morning I'm receiving an error when trying to update the vulnerabilities database. I searched for this issue in
Microsoft Defender patch failing
Patching of Microsoft defender keeps failing The latest update for Microsoft Defender (1.429.453.0) with error message "Another version of this product is already installed. Installation of this version cannot continue. To configure or remove the existing
WINDOWS AUTOPATCH
Hi Microsoft released Hotpach for Windows 11 enterprise OS is it something that can be integrated in Endpoint Central or its too integrated with Intune/Orchestration and cannot be managed by a 3rd party ? thx
The summary tab
The summary tab is opening first when you click on a computer name. It used to be the patches tab that opened when you clicked on the computer name, and they switched after updating to Endpoint Central version 11.4.2516.08. How can I switch it back?
EndPoint Central DataBase Schema Patch MgMt
Hello everyone, could someone provide me with the updated schema of the Patch Mgmt Module? I have it as shown in the attached image, but it seems to me that it is not completely updated.
KB5061768 support
When will the out of band patch for Windows 10 22h2 be supported? Would prefer this one over the one that bluescreens on bitlocker. KB5061768
Vulnerability CVE-2024-43590 identified but suggesting superseded patch. Microsoft Visual C++ 2015-2022 Redistributable - various versions.
Is anyone else experiencing this... Microsoft Visual C++ 2015-2022 Redistributable Current patch level - 14.44.35112.1 is not being identified as required. This affects ALL devices. Vulnerability report is suggesting installing superseded patch 14.40.33816.0
Network driver notification time waiting
Hello, I have a question about updating the network drivers, the notification before the starting deployment has time waiting for 5 minutes, and the question is, we can change this time frame or this cannot be changed? Regards, Marius
Patch Tuesday Updates: May 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-05 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5058429) (ESU) (CVE-2025-30397) (CVE-2025-32706) (CVE-2025-32701)
Using WSUS as the source of update files...
Hi all; My customer prefers to use WSUS in Internet side and Endpoint Central as the intranet side. Is it possible to sync updates from WSUS? Thanks
Unintentional Shutdowns after Patches
Hello, We keep receiving messages from users complaining that their laptops are being restarted or shut down unexpectedly after patches are applied. We have configured a policy for the affected patches: "no notification, no restart." Do we need to change
MySQL Connector 9.3 patch unsupported
Just FYI in case anyone else was looking, EPC is not supporting MySQL Connector 9.3 patch because of software requirements. Even though their 3rd party list still includes this.
The system TPM version is not compatible with Windows 11. (50010
Hi, my systems don’t support TPM. I want to update them via ManageEngine, but I received the following error: "The system TPM version is not compatible with Windows 11. (50010)" Is there any way to bypass this issue?
Can I just have patches delivered to a server but not install them?
We have a group of servers that need to be patched manually because of the need to coordinate the restarts with other servers. Is there a way to automatically deliver the patches that have been approved to the server but not install them. So, they will
Upgrade to Windows 11 version 24H2 with Endpoint Central!
Hello everyone! As you all must be aware, Microsoft has recently rolled out the new 2024 update (version 24H2) for Windows 11. This is the major update for Windows 11, encompassing all the features and fixes from previous cumulative updates in Windows
Multiple versions of Cumulative Updates in same month
I have a Windows 2019 Server that reports this patch is installed: 2025-04 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB505519) But Manage Engine shows that following patch needs applied 2025-04 Cumulative Update for Windows
Google fixes high severity and critical severity vulnerabilities in its Chrome 135.0.7049.95/.96 Stable Channel update
Chrome Stable Channel has been updated to 135.0.7049.95/.96 for Windows,Mac and 135.0.7049.95 for Linux. This update comes with 2 security fixes. The details of the vulnerability fixed are mentioned below: CVE-ID VULNERABILITY SEVERITY CVE-2025-3619 Heap-based
Patch Tuesday Updates: April 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-04 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5055596) (CVE-2025-29824) (ESU) 2025-04 Security Only
Notification to computer owner after patch installation
Hello I would like to automate the notification of the computer's (server) owner and a patch installation. The owner is available in the "Custom Computer Details". Is there any way to achieve this?
Patch Tuesday Updates: March 2025
Good day, everyone! Here's a list of the updates released in this month's Patch Tuesday. New OS Security Updates: 2025-03 Security Only Quality Update for Windows Server 2008 for x64-based Systems (KB5053995) (ESU) (CVE-2025-24991) (CVE-2025-24985) (CVE-2025-24993)
Google fixes several high severity vulnerabilities in its Chrome 134.0.6998.117/118 Stable Channel update
Chrome Stable Channel has been updated to 134.0.6998.117/118 for Windows and Mac (release in progress). This update comes with 1 security fix. The details of the vulnerability fixed are mentioned below: CVE-ID VULNERABILITY SEVERITY CVE-2025-2476 Use
Deployment of Windows 11 24H2 Bulletin ID MSWU-3640
Windows 11 Readiness Reporting available in build 11.4.2500.17 does not look at the EFI partition size or space available , why is this? Those two factors can cause failure to deploy MSWU-3640. When will we see a fix for this reporting and as part of
This version is not applicable for this target (Feature Update via Windows 11, version 23H2 Enablement Package (22H2 - 23H2) (x64)
Hi! I have some issues to run Feature Update via Windows 11, version 23H2 Enablement Package (22H2 - 23H2) (x64), we recevie "This version is not applicable for this target" on our Windows 11 22H2 machines. But when we download Windows11.0-kb5027397-x64.msu
Next Page