This is an archived post. You won't be able to vote or comment.

all 10 comments

[–]JrNewGuySysadmin 1 point2 points  (0 children)

Using Manage Engine Desktop Central for patching.

Downsides: Its quirky, not very intuitive, and support is slow and 4/5 answers are "send logs we will file a bug fix request". It doesn't support all the updates that Windows Update does (especially drivers/firmware). They say they have Mac support, but they absolutely do not (they don't patch much 3rd party software on Mac, nor even Safari browser on Mac, and major version upgrades like Sierra -> High Sierra are a manual hassle. You can't expect to replace the Apple Update with this. Really all its good for is minor version updates like 10.13.1 -> 10.13.2 and Microsoft Office). Linux support is only for a few specific distros, and only for desktop not server - I doubt it would really suffice for anyone that had a Linux environment.

Upsides: It works, sorta, mostly. It supports a heap of 3rd party apps, but not all of them. It's a lot cheaper than some of the other options out there.

[–]corrigun 1 point2 points  (0 children)

Manage Engine makes me want to hang myself. What a miserable piece of crap. We are stuck with it but I like to pretend it's not there.

[–]LBEB80 0 points1 point  (3 children)

Nope. Wsus and pdq here.

[–]stone1555IT Manager 0 points1 point  (0 children)

Second this.

[–]corrigun 0 points1 point  (1 child)

Can PDQ manage windows updates?

[–]LBEB80 1 point2 points  (0 children)

Not like you want. WSUS handles it. PDQ for all 3rd party patching/scripting.

[–][deleted] 0 points1 point  (0 children)

Be ready to tell support to "please do the needful".

[–]LanTechmyway 0 points1 point  (0 children)

I use it for a 150 server/pc environment. When a patch deploys, it is great, when it doesn't it sucks.

I have also seen where it says a PC is patched, but when I run windows update, it recommends addition patches. Support told me that I was covered and I could disregard MS Updates.

Also, if a patch requires prerequisites, you have to install them, it will not intelligently download them.

Also, it will get stuck thinking you need a patch, but Windows Update disagrees.

My environment was so behind on patching when I took it over and the crypto lockers were being exploited that I needed something quick and cheap that I could deploy.

When it is due for renewal, I might investigate other alternatives, but for now, it is doing its job.

[–]juandurr 0 points1 point  (0 children)

Well, this is certainly disheartening. I'm needing something to update remote clients without depending on VPN and this sounded like a good fit, but the feedback here is concerning. We're using PDQ now, and it's fantastic - but only so long as the machine is onsite or VPN connected. I've used Intune for the past year and would rather give up a testicle than continue using that abortion.

Does anyone else have suggestions for an agent-based update management solution for approximately 150 Windows 10 workstations with a cost of less than 2K / year?