barscaret-downcaret-leftcaret-rightcaret-upcheckchevron-leftchevron-rightfile-pdfinfosign-in-altsignin text-widthtimesyoutube

Windows > Patch Management

Windows patch management

Updated on November 16th, 2023

Patch management helps organizations to ensure the performance and security of the managed Windows devices. In addition to Windows operating systems, Miradore currently supports automated patching for 300 different software products, such as Adobe, Dropbox, Safari, and Zoom.

Learn more about supported vendors and products.

Technical details of Windows patch management

Patch management is run with the Miradore client application (a process named 'MiradoreClient'), a light background service on the managed Windows devices. The Miradore client supports the following 64-bit operating systems:

  • Windows 7 SP1 or newer
  • Windows 8.1 or newer
  • Windows 10
  • Windows 11

The Miradore client is installed on the enrolled Windows devices. For devices that run the 'Full' management type, the Miradore client is automatically installed by the MDM. For devices that run the 'Light' management type, the Miradore client is the only management method.

You can centrally manage patches for Windows devices in the following stages:

  • Detect
  • Report
  • Pilot
  • Deploy

Detection of available patches and reporting are included in the Miradore Free plan, while pilot testing and patch deployment come with the Miradore Premium plan. To fully benefit from the feature, upgrade to the Premium plan.

Windows patch deployment

Miradore users with the Premium plan can automate the patch installation for their Windows devices and create custom installation rules by including some vendors and their products and excluding others. Miradore administrators can define the settings for automated patch installation at Management > Patches - Installation settings.

Enable Windows patching

Read the article about automating patch deployment to learn more about the installation settings.

If you are a Miradore administrator, you can define a pilot group for testing released patches with specific devices. You can define the pilot group using tags. Learn more about patch deployment in Miradore.

Notification for a restart

The patched device displays a notification if a restart is needed to finish the patch installation.

Configuring Windows Update for the managed computers

To ensure the proper functionality of Miradore's patch management feature in your managed computers, we recommend configuring Windows Update on the managed computers as follows:

  • Make sure the Windows Update Service is not disabled. Patch deployments won't succeed if the service is disabled.
  • Set Windows Automatic Updates to Never check for updates (Windows 7 & 8). This will speed up the patch deployments. If Windows Automatic Updates is configured to check for updates, it may slow down patch deployments with Miradore. It also makes patching more manageable when there is only one system patching device.
  • On Windows 10 computers you cannot modify the automatic updates setting from the Control panel, but you can edit the settings through the Group Policy Editor or use Miradore's Windows Update configuration profile to disable the automatic updates. On domain-joined computers, this setting is most likely managed through group policies by your administrator.
  • This field is for validation purposes and should be left unchanged.

Next Article: