×
×
×
×

Direct Download of Patches

Last Updated On: 12 Oct 2026|
5 minutes read |

Direct download allows managed endpoints to download patch binaries from vendor websites without depending on the Central Server for the patch files. This can reduce Internet and VPN bandwidth consumption in the network where the Central Server is hosted.

When direct download is enabled through the patch-management internal setting, remote or VPN-connected endpoints download patches from vendor websites. When those endpoints return to the intranet, they download patches from the Central Server. On Windows endpoints, you can additionally force direct download while the endpoint is inside the network.

Note
This setting applies only to roaming users. The configuration described on this page is not supported in the On-Cloud edition. On-Cloud agents download patches from the Internet by default.

Enable direct download for remote endpoints

This method is available on server builds 100715 and later.

  1. Open https://<hostname>:<port>/webclient#/uems/patch-mgmt/internal-settings.
  2. For Key, enter addMetaParams.
  3. For Payload, enter {"addParam":"Patch_Direct_Download_DC", "option":"0"}.

To disable direct download, use the same key with the payload {"addParam":"Patch_Direct_Download_DC", "option":"1"}.

Force direct download on Windows endpoints

To force a Windows endpoint to download patches from vendor websites even when it is inside the network, create a computer-based Registry Settings configuration and deploy the following value to the required endpoints.

Windows registry value for forcing direct patch downloads
SettingValue
HiveHKEY_LOCAL_MACHINE
64-bit subkeySOFTWARE\WOW6432Node\AdventNet\DesktopCentral\DCAgent
32-bit subkeySOFTWARE\AdventNet\DesktopCentral\DCAgent
Value nameForceDirectDownload
TypeREG_DWORD
Data1

For instructions on creating, targeting, and deploying the configuration, see Configure Registry Settings for Computers.

Enable or disable direct download on macOS endpoints

The macOS direct-download patches are available on server builds 100546 and later.

  1. Navigate to Patch Mgmt → Patches → Supported Patches.
  2. To enable direct download, search for patch ID 602357 - Direct Download Enabler for MAC Patches.
  3. Select the patch and deploy it to the required macOS endpoints.

To disable direct download, deploy patch ID 602358 - Direct Download Disabler for MAC Patches to the required macOS endpoints.

Verify the direct download state

  1. Open the affected endpoint's agent log file, computer0.log. On Windows, check the agent's Logs directory, for example C:\Program Files (x86)\ManageEngine\UEMS_Agent\Logs\.
  2. Search for DirectDownloadState. For example, LastDirectDownloadState : Disabled indicates that direct download was disabled when that entry was recorded.

For macOS log collection, follow the agent log collection instructions and search the same log file for DirectDownloadState.

The logged setting does not identify the source of every patch transfer. When investigating Distribution Server bandwidth, also check the endpoint's remote-office assignment and whether a Distribution Server is enabled for that office.

Related