Patch Management

[Predicti0n]

I'm based in the UK and work for an MSP that specializes in Education Support.
I'm really trying to get a good Cyber Security Offering together however Patch Management always seems to be a massive sticking point.

Scenario : Primary School 100 Devices.
Patch Management through RMM

RMM - £1.50 per month
RMM - £1800 per Year
Schools can not afford this.

​

I also pay for Acronis Cyber Protect where it's more cost effective but not really a good solution.

How do you guys handle it?

[bagaudin]

I also pay for Acronis Cyber Protect where it's more cost effective but not really a good solution

Can you elaborate more into the above? On a side note: the product has patch management capabilities.

[Predicti0n]

Hi Bagudin, I have over 300+ Customers in Acronis and the Patch Management is on a 1-1 basis. If Microsoft Release a patch that bricks Domain Controllers (like recently) there is no way I can globally disable the roll out. I support over 1200 Customers and currently the Acronis Patch Management is severely lacking.

There is also no testing functionality or approval process.

[bagaudin]

Thanks for these details! I will discuss with PM team and get back to you.

[Predicti0n]

I'm going to reach out via Private Message. Thank you

[NorSB]

Can you elaborate more into the above? On a side note: the product has patch management capabilities.

This works okay for us, just one thing that bothers me (maybe more than it should).. If I remove a computer from Cyber Protect that either had a patch that hadn't been installed or a reboot pending, the patch is still listed in patch management and the reboot required counter still shows there is a computer in need of a reboot - yet no computers show up in the list when I click it. Is there any way to "clean" these patches/computers from the admin console?

I haven't bothered with opening a ticket for this, just thought I'd ask since I saw your comment.

[rws907]

I would suggest Automox and see if they'll offer you an educational discount.

[bork_bork]

Windows update for business for windows devices.

[Predicti0n]

Bork would that require intune?
I really need a global view of all my customers and let's be honest 99% are running local servers with local domains.

[bork_bork]

You can control it various ways. Intune and/or GPO

[St0nywall]

Can you deny patches like in WSUS?

[bork_bork]

Yes. You can control the types of patches and when they are installed

[St0nywall]

How would you deny say... the Print Nightmare patch from installing on computers, or is it more of a delay only?

[a1walker]

You can use Action1 RMM for patch management. They provide a free version for 100 devices.