OS Patch Management Settings For Groups

You can configure how you want to handle patching for the devices in a group.

1. Select System Management > Edit Group.

2. In the OS Patch Management area, configure the settings for the respective group according to the following:

Windows and macOS Patch Management

Use this field to configure automatic update settings for devices. By default, devices from Microsoft and Apple are configured to patch any automatic updates that may become available. As these automatic updates can interfere with the Automox patching process, we recommend disabling automatic updates when possible.

3. Click the drop-down menu to select from the following configuration options:

  • Keep Device’s Setting: Automox does not modify the automatic update configuration for the device. Whatever is configured on the device will persist when it is added to the respective group.
  • Disable OS automatic updates: Automox modifies the device configuration by disabling automatic updates. This configuration will persist. If the device configuration changes, it will be changed back during the next scan.
  • Enable OS automatic updates: Automox modifies the device configuration by enabling automatic updates. This configuration will persist. If the device configuration changes,  it will be changed back during the next scan.


Windows Update Source

Use this field to configure the source from which Windows devices will pull updates. By default, Microsoft distributes their devices to use the Windows Update catalog for pulling updates.

4. Click the drop-down menu to select from the following configuration options:

  • Keep Device’s Setting: Automox does not modify the update source configured on the device. Whatever is configured on the device will persist when it is added to the respective group.
  • Windows Update: Automox will modify the device configuration to use the Windows Update Catalog as its update source. The configuration will persist, whenever an endpoint configuration changes it will be changed back during the next scan.
  • WSUS: Automox will modify the device configuration to use a WSUS server. This option should only be selected if you already have a WSUS environment configured in your domain. When this option is selected a third field will appear as described in the following:
  • WSUS Server Address: This field is used to provide the WSUS server URL that will be used when configuring an device to use WSUS. (for example, http://Lab-WSUS:8530)

5. Click Update Group to save these settings.

Windows Environment Advisory

Note that these settings can be, and often are, configured through Group Policies (GPOs) in a Windows domain/enterprise environment. We do not recommend using Automox and GPOs to configure these settings concurrently. The GPO takes precedence in such a scenario. Therefore, if you are already using GPOs to configure these settings, please select Keep Device’s Setting for the fields described earlier in this topic.