Patch Management Solution for Windows uses inventory information to decide which software update packages to distribute. From software bulletins, you create the software update policies that send the associated packages to managed computers and install the appropriate software update programs.
After you install Patch Management Solution for Windows, you download complete software bulletin information from the Symantec Web site. Information includes the severity of each software bulletin, details on its software updates, and where they can be downloaded from the vendors. This information also includes rules for creating filters and rules on how to verify that a software update is installed. Then you deploy the software update plug-in to managed computers, which gathers inventory. Inventory includes software vendor, software release, and service pack information. From this inventory, Patch Management Solution for Windows creates specific filters to target only the computers requiring individual software updates.
You use the Distribute Software Updates wizard to automate the downloading and distribution of software updates. Instead of creating a policy for each individual software update, you use this wizard to create a single policy for the relevant software bulletins. You can add multiple software bulletins to a policy. If you want to, you can modify any default settings and command-line options in a software update policy.
When you download a software bulletin, each associated software update executable is downloaded from the vendor to the Notification Server computer. From the information in software bulletin executables, Patch Management Solution for Windows then creates a software update package for each software update. From the downloaded software bulletins, you then create software update policies to distribute software update packages to the appropriate computer filters. When a managed computer receives a software update policy, it verifies that the update is needed, then downloads the software update package from the Notification Server computer or a package server. The managed computer then installs the update. At an interval, the software update policy is re-evaluated and software updates are reinstalled if needed. For example, if an operation removes a software update, it is reinstalled. Or if a vendor revises a software update, it is reinstalled.
After the software update plug-in distributes software updates, it sends results of patch deployment to the Notification Server computer. This information can be viewed through reports and the dashboard.
Imported Document ID: HOWTO63801
Subscribing will provide email updates when this Article is updated. Login is required.