OS Patch in Endpoint Policies

To access the OS Patch page within Endpoint Policies:

1. Log in to the Splashtop web console (Global/EU/OC).
2. Navigate to Automation > Endpoint Policies.
   
3. Click Create Policy or Edit for the selected policy to enter the OS Patch section to configure update settings.
   

The Update Settings section allows users to define how OS updates are handled on managed devices with the following options:

• Let OS install updates automatically
• Download updates but let me choose whether to install them (Default)
• Check for updates but let me choose whether to download and install them

This section allows you to define when the system should check for available updates.

• Daily: Set a specific time (default: 02:00).
• Weekly: Select the day(s) of the week and time (default: Monday, 02:00).
• Monthly: Select the date(s) and time (default: 1st, 02:00)
• Scan immediately if a computer missed the prior scheduled task: This option takes effect only from the next scheduled scan time if the policy was newly created or recently modified.

Note: The availability of features under Approvals, Core Updates, and Patch Overrides differs between Windows and macOS:

• Windows: Supports all features — Approvals, Core Updates, and Patch Overrides.
• macOS: Supports only limited update management. Core Updates and Patch Overrides are not available for macOS devices at the moment.

• In the Approvals section, administrators can set up approval rule based on patch importance (Important or Optional): 
  Windows:
  
  Mac:
  

  • Approve: The update will be approved and installed at the scheduled time.

  • Manual: The update will remain pending, allowing users to decide whether to install it.

  • Ignore: The update will be ignored when available.

• Starting with Windows streamer version 3.7.4.3, the Core Updates feature enables you to perform major Windows upgrades—such as moving from Windows 10 to 11 or from 22H1 to 22H2. These updates involve significant OS changes and typically take longer than regular updates. You can now manage and deploy Core Updates directly from the Splashtop console for better control and visibility across your devices.
  
• In Patch Overrides, administrators can create exceptions for specific updates:
  
  • Click Add and enter the KB number of the update along with a description.

• Once added, assign a different approval status for the specific KB update.

The Update Schedule section defines when approved OS patches are installed:

• Schedule installation: Set specific days and times for updates
• Postpone updates: Delay installation for a specified period to minimize disruption.
• Install updates immediately: Apply patches as soon as they are approved.

The Reboot Options section determines how devices handle restarts after installing an OS patch:

• Auto-restart if required: The system reboots automatically after the update, with a delay of 15, 30, 45, or 60 minutes after completion.
  • Notify user about the reboot if a user is logged in: Set up when to send the notification, log out the user without notification, or skip the reboot.
• Reboot immediately after completing the update: The system will restart automatically right after the update is installed.