Microsoft patch management can be a time-consuming, labor-intensive, and disruptive process. As a result, many SMBs neglect it—introducing considerable risk to their businesses. A recent study conducted by the Ponemon Institute found that 60% of security breaches can be traced to a known but unpatched vulnerability. A good patch management strategy can minimize the risk associated with these vulnerabilities and prevent attacks.
Microsoft patch management presents a clear opportunity for MSPs and MSSPs. However, to deliver Microsoft patch management as a service, it is crucial to develop an effective strategy and use tools that can automate patch management tasks. Many IT providers use remote monitoring and management (RMM) software, alone or in tandem with additional third-party tools, to deliver patch management services.
Patch Management Challenges
Simply applying Microsoft updates as they are released can actually create more problems than it solves—a quick Google search will reveal how common buggy Microsoft updates can be. Because of this, administrators often wait to patch until they are certain that Microsoft has resolved issues, and even exclude some updates entirely.
For example, many IT providers choose to exclude what Microsoft calls “Preview of Monthly Quality Updates.” These updates contain new, non-security fixes that will be included in the following month’s update. By installing preview updates, you essentially opt-in to beta testing for Microsoft. So, it's easy to understand why IT providers do not install them on their clients’ systems.
Of course, the longer you wait before patching known vulnerabilities, the more you run the risk of attacks. The key to successful patch management is striking a balance between keeping systems as stable and secure as possible, while preventing issues with buggy updates.
Automating patch management with RMM
RMM tools enable IT providers to automate much of the patching process. Let’s take a look at an example workflow using Datto RMM:
Patch Management Best Practices
Obviously, every client has unique needs that you’ll need to account for and this is by no means an exhaustive list of what should be included in your patch management strategy. However, the following five items are a good place to start:
So, yes, patch management can be challenging. However, there are tools available that enable IT providers to deliver patch management as an effective and profitable service. To learn more about how Datto RMM fits into your patch management strategy, schedule a demo today.
Andrew Burton is senior technical content manager at Datto. Read more Datto guest blogs here.
