OSD – Trigger/force patching as final post-deployment step

OSD – Trigger/force patching as final post-deployment step

Hi everyone,

We are currently implementing the Endpoint Central OSD module for our Windows staging process.

As part of our post-deployment phase, we install the Endpoint Central UEMS Agent as one of the final steps using the new Software Package integration in OSD.

What we would like to achieve afterwards is to trigger and complete the patching process as the final step of the staging workflow.

Is there currently a supported way to force the newly staged device to perform a patch scan and install all applicable patches directly after the UEMS Agent has been installed?

Ideally, I think Patching could also be available as a dedicated step in the OSD post-deployment phase, similar to the Software Package integration.

From a Service Desk perspective, this would be very useful because the complete staging process could then be handled and monitored within OSD:

OS Deployment → Post-deployment configuration → Software installation → UEMS Agent → Patching → Staging completed

This would provide a true end-to-end staging workflow and ensure that a device is fully patched before it is considered ready to be handed over to the end user.

How are others handling the patching part of their OSD/staging process today? Is there already a recommended approach in Endpoint Central to achieve this?

Thanks!