5 Questions about Patch Management Software

It may not seem like it, but patch deployment tools have come a long way in a short time. Purchase a tool from one of the leading vendors today, and you’re getting integrated scanning and deployment facilities, support for both desktops and servers, granular scheduling and coverage of a wide variety of applications, technologies, and operating systems. The same wasn't true as recently as three years ago.

There are key differences among tools, though. Some are agent-less, others are agent-based and some support both. Some tools support non-Microsoft platforms – Sun’s Solaris and Linux are the most popular alternatives – while many remain Microsoft-only plays. Some tools offer more robust or flexible reporting, while others boast support for features like patch rollback.

Featured Download UpdateEXPERT Patch Management
UpdateEXPERT takes the risks and worry out of patch management. With its exclusive client agent, you can patch your network no matter where your machines are - even if they are unconnected. Download a FREE Trial today and see how easy patching can be!
Click here to download the trial version.

And that’s just the beginning. A complete rundown of each vendor’s support for Microsoft’s technology stack would make for a pretty hefty PDF file. Shavlik Technologies’ HFNetChk Pro 4.3 product, for example, supports all current Microsoft operating systems, including Windows NT 4.0, along with several versions of Office, Internet Explorer, DirectX, IIS, Exchange and SQL Server. St. Bernard Software supports all of these technology offerings in a single product -- UpdateExpert. Ecora Software covers almost all of this software stack – with the exception of DirectX. But Shavlik supports several versions of Red Hat Linux, while Ecora supports Sun Solaris. You get the picture.

One thing seems certain, however: Today’s patch management tools are a cut above Microsoft’s free Software Update Services (SUS) offering. Whether it’s blanket or near-blanket coverage of Microsoft’s operating systems and applications (SUS doesn’t support Windows NT 4.0, for example), bandwidth management or throttling capabilities, integrated reporting or policy-based patch management, most of the users we spoke with say that commercial patch management tools – including Microsoft’s Systems Management (SMS) 2003 -- successfully address SUS’ most glaring shortcomings.

Oh yeah, and some users say they’re a heckuva lot easier to use, too.

“We tried to use [SUS] before deciding to purchase a solution,” says Andrea Dahl, a Windows administrator with a municipal credit union based in the Southeast. “We could not get it working and multiple people spent time troubleshooting [it]. It's supposed to be easy, but it wasn't, and we didn't think that you could call Microsoft for support.”

Sponsor -- Keep your network secure with Shavlik HFNetChkPro
Install the latest critical Microsoft security patches today with Shavlik HFNetChkPro. This free, fully functional, no time-out version helps you automate patch delivery and testing with swift scanning, a complete GUI and Shavlik's exclusive PatchPush capabilities.
Click here to download the trial version today .

Dahl, like many other users, turned to a commercial patch management solution – in this case, St. Bernard Software’s UpdateExpert.

Sorting through the glut of available patch management tools can be a confusing task. We can't do it for you, but we can provide a framework to help. What follows is five important issues to make sure you've considered when selecting a patch management tool.

About the Author

Stephen Swoyer is a Nashville, TN-based freelance journalist who writes about technology.


  • Spaceflight Training in the Middle of a Pandemic

    Surprisingly, the worldwide COVID-19 lockdown has hardly slowed down the space training process for Brien. In fact, it has accelerated it.

  • Surface and ARM: Why Microsoft Shouldn't Follow Apple's Lead and Dump Intel

    Microsoft's current Surface flagship, the Surface Pro X, already runs on ARM. But as the ill-fated Surface RT showed, going all-in on ARM never did Microsoft many favors.

  • IT Security Isn't Supposed To Be Easy

    Joey explains why it's worth it to endure a little inconvenience for the long-term benefits of a password manager and multifactor authentication.

  • Microsoft Makes It Easier To Self-Provision PCs via Windows Autopilot When VPNs Are Used

    Microsoft announced this week that the Windows Autopilot service used with Microsoft Intune now supports enrolling devices, even in cases where virtual private networks (VPNs) might get in the way.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.