When to use automated patch packaging

When to use automated patch packaging

What's the best (most efficient) way to deliver updates to Win XP/2000 workstations using patch packages? Should they be applied locally? Also, would you recommend automating patch packaging?

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

In an environment with even a modest number of workstations, I recommend automating patch management. For Windows systems, there are any number of tools available from vendors such as Shavlik, BigFix, PatchLink, Altiris, Symantec, and of course Microsoft itself.

Applying locally is undesirable for a number of reasons:

  • Increased error rate because of manual application (e.g. the human factor)
  • Increased labor costs
  • User interruption during patch application

The only real positive that manual, local patching brings is a faster response time when something goes wrong.

So, if you are an organization of at least 30 or so workstations wrestling with the issue of patch management, I would strongly suggest beginning to look into automation. If your budget cannot currently handle adding third-party solutions, you can examine using some homegrown solutions such as batch files, logon scripts, and WMI scripting.

This was first published in June 2005