Ensure remote Windows computers remain secure, compliant, and up to date. View missing, available, and installed patches, filter by severity, deploy updates directly, and track reboot status — all from one agentless console. 100% free.
Every feature is purpose-built for real Windows administration work — designed to save time, reduce disruption, and keep your fleet under control.
Don't wait for monthly reporting cycles to know which machines are missing critical patches. This tool shows you missing, available, and installed updates across your fleet in real time — and lets you deploy patches directly from the console, filter by severity, and track reboot status. Everything you need for fast, compliant patching.
Get a unified view of patch state on any remote Windows machine — what's missing, what's available, and what's already installed. No more cross-referencing WSUS reports with machine status.
Sort by Critical, Important, Moderate, or Low severity. Filter by classification — Security Updates, Critical Updates, Definition Updates, Service Packs — to prioritize what matters most.
Select missing updates and trigger installation remotely — no WSUS approvals to navigate, no GPO scope changes, no scripts. Faster response to zero-day patches and emergency security advisories.
See which machines need a restart to complete patch installation. Coordinate reboots with users or pair with the Shutdown/Restart tool to automate the post-patch reboot cycle.
Fleet-wide view of patch compliance. Identify outliers — machines that haven't reported in, systems consistently behind, or high-risk endpoints missing critical updates. Pairs with Wake on LAN for after-hours patching, Shutdown/Restart for the reboot cycle, and System Inventory for hardware context.
From download to first result in five simple steps. No complex configuration, no firewall rules, no additional licensing.
Install the bundle on your administrator workstation. No agent deployment to target PCs required.
Click Windows Updates in the left sidebar of the unified Free Windows Admin Tools console.
Choose one machine for a spot-check, or select entire OUs for a fleet-wide patch compliance scan.
Filter results by severity and classification. Critical security updates float to the top — moderate cosmetic updates fall to the bottom.
Select missing updates and deploy directly. Monitor installation progress and reboot requirements in the same view.
Quickly audit fleet-wide patch state after Microsoft's monthly release. Deploy critical patches that hour — no waiting for the next maintenance window.
When a critical CVE drops out-of-band, immediately identify which machines are exposed, deploy the patch directly, and verify installation — without waiting for SCCM cycles.
Generate proof-of-patching reports for security audits, cyber-insurance renewals, and regulatory frameworks. Show auditors hard data on patch deployment timelines.
When manual patching can't keep up, Patch Manager Plus delivers full automation — Windows + Mac + Linux + 950+ third-party apps, patch policies, test groups, vulnerability-based prioritization, and rollback. Free for up to 25 endpoints.
Yes. 100% free with no endpoint limits, trial period, or hidden costs. Part of the Free Windows Admin Tools bundle from ManageEngine.
Yes. Unlike audit-only patch scanners, this tool lets you select missing updates and trigger installation remotely on any domain-joined Windows machine.
Microsoft Windows updates — Security Updates, Critical Updates, Definition Updates, Service Packs, Cumulative Updates, and other Microsoft-published patches. For third-party application patching (Chrome, Adobe, Java, etc.), see Patch Manager Plus.
Yes. Filter by Microsoft severity ratings (Critical, Important, Moderate, Low) and by classification to prioritize the most impactful patches first.
Yes. The tool tracks reboot requirements per machine. Coordinate with users or pair with the Shutdown/Restart tool to handle the post-patch reboot cycle automatically.
Plus 16 other free Windows admin utilities in a single download. No credit card, no sign-up form.