Required Best Practice for Windows Endpoint Patching.

Hi Team, Hope you guys doing good.

Recently we gone through Audit & caught up in windows patching. It seems our device was not properly compliance. Currently we are using desktop central to pushed patches on endpoints. required your suggestion to create best Windows endpoint patching practice.

Currently we used automatic scheduled deployment utility in DC, but systems are not properly patched up. For remote users we also enable NATING on DC server to access remote agent, but it wont work as usual. Let us know, "What is best practice to do Windows & Application patching. Also we need to cover outside networks systems which is not communicate with domain.

Looking forward to here from you.