Patch deployment with Endpoint Central from ManageEngine

Introduction,Microsof,t,WSUS,Server Update Services,to have an overview of all pending updates and to always roll out the latest updates automatically throughout the network.,It can only be used for Windows devices.,Further disadvantage:,It only works for Microsoft's own updates, no third-party software is updated with it. = Unsafe or requires manual updating work,,Today, however, third-party software updates and driver updates are also necessary. I don't want to know what our customers have installed on their devices. However, the patch management system from ManageEngine knows exactly and lists the pending updates for us:,Figure 1,How should an entire company network be kept up to date in the best case scenario? On the one hand, monitoring across all network devices, a maintenance contract where all network devices are updated on a recurring basis and a system that keeps the servers and clients up to date. The ManageEngine agent can be installed on Windows devices, Linux devices and Apple devices. This allows us to see all status information about the device in the ManageEngine dashboard and we can see the currently pending patches (updates).,How far does automation with ManageEngine go?,On Microsoft's Patchday, on the second Tuesday of each month, the latest patches for Windows servers and clients are released for rollout.,Depending on the configuration, ManageEngine searches all devices for patches that have been released for them every 24 hours, for example, and summarises them in a list. (According to Figure 1),We configure a new task for automatic patch updates,We select which Microsoft updates are to be updated,We select which third-party updates, virus protection updates and driver updates are to be updated,We configure a patch deployment policy e.g. based on the patch Tuesday and enter a time window at which the update should run through, we create scripts what should happen before the update (pre-script) and those that should be executed after the updates (post-scripts) e.g. a restart of the server or restarting certain services. Then you configure which notifications are to be sent to whom,There are company structures where not all servers can be updated at the same time because they are dependent on other server services. Any number of tasks can be configured and automated for server groupings. An IT specialist is then required to analyse the reports and, if necessary, make corrections where there were difficulties. Conclusion: A system that automatically rolls out patches on a monthly basis significantly increases the security of your infrastructure.
Company networks must always be up-to-date, there are no ifs and buts.
However, there are various ways to achieve this goal. Herewith a product recommendation

Alternative to WSUS

Many computer scientists work with the Microsoft WSUS (Windows Server Update Services)um eine Übersicht aller anstehenden Updates zu haben und um stets die aktuellen Updates im ganzen Netzwerk automatisiert auszurollen.

Disadvantage: Es kann nur für Windows Geräte eingesetzt werden.

Weiteren Nachteil: Es funktioniert nur für Hauseigene Updates von Microsoft, keine Drittherstellersoftware wird damit aktualisiert. = Unsicher oder hat Bedarf an manueller Aktualisierungsarbeit.

Heute sind aber auch Dritthersteller Software Aktualisierungen sowie Treiberaktualisierungen notwendig. Ich möchte jeweils nicht wissen, was unsere Kunden alles auf ihren Geräten installiert haben. Das Patch-Management System von ManageEngine weiss es aber ganz genau und listet uns die anstehenden Aktualisierungen dazu auf: