The OS Patch section within Endpoint Policies allows administrators to configure and manage OS update behaviors on remote computers. This powerful tool helps users define patching schedules, set approval rules, manage reboot options, and more—ensuring that devices are up-to-date and secure with minimal manual intervention. Here’s how to set up and manage OS Patch in Endpoint Policies.
Supported Subscriptions
- Splashtop w/ Endpoint Management add-on* (Remote Support license required)
- Splashtop Enterprise w/ Endpoint Management add-on* (Remote Support license required)
Requirements
Streamer must be version 3.7.4.2 and up.
How to use OS Patch in Endpoint Policies
To access the OS Patch page within Endpoint Policies:
- Log in to the Splashtop Web Console (my.splashtop.com/my.splashtop.eu).
- Navigate to the Management tab and click on Endpoint Policies.
- Click Create Policy or Edit for the selected policy to enter the OS Patch section to configure update settings.
The Update Settings section is for Windows devices only. Users can define how OS updates are handled on managed devices with the following options:
- Install updates automatically
- Download updates but let me choose whether to install them (Default)
- Check for updates but let me choose whether to download and install them
This section allows you to define when the system should check for available updates.
- Daily: Set a specific time (default: 02:00).
- Weekly: Select the day(s) of the week and time (default: Monday, 02:00).
- Monthly: Select the date(s) and time (default: 1st, 02:00)
- Scan immediately if a computer missed the prior scheduled task:This option takes effect only from the next scheduled scan time if the policy was newly created or recently modified.
In the Approvals section, administrators can set up approval rule based on patch importance (Important or Optional):
-
Approve: The update will be approved and installed at the scheduled time.
-
Manual: The update will remain pending, allowing users to decide whether to install it.
-
Ignore: The update will be ignored when available.
In Patch Overrides, administrators can create exceptions for specific updates:
- Click Add and enter the KB number of the update along with a description.
- Once added, assign a different approval status for the specific KB update.
The Update Schedule section defines when approved OS patches are installed:
- Schedule installation: Set specific days and times for updates
- Postpone updates: Delay installation for a specified period to minimize disruption.
- Install updates immediately: Apply patches as soon as they are approved.
The Reboot Options section determines how devices handle restarts after installing an OS patch:
- Auto-restart if required: The system reboots automatically after the update, with a delay of 15, 30, 45, or 60 minutes after completion.
- Notify user about the reboot if a user is logged in: Set up when to send the notification, log out the user without notification, or skip the reboot.
- Reboot immediately after completing the update: The system will restart automatically right after the update is installed.
Summary
The OS Patch section in Endpoint Policies is a versatile tool that allows administrators to configure and automate the management of operating system updates across remote endpoints. By customizing update schedules, approval processes, and reboot options, users can ensure that devices remain up-to-date and secure with minimal manual intervention.