Assessing Automate Patch Deployment
After creating APD tasks you can view them listed under Threats & Patches → Deployment → Automate Patch Deployment.
As shown in the image below, this page displays the task name, deployment time, creation time, current deployment status, and the total number of targets associated with the task. The Current Status indicates the number of patches that have been successfully applied, failed, or are still in progress. It also shows if any patches are missing. Additionally, if the task has been suspended or expired, this status will be reflected under the same. Interpret Patching Completed together with the installed-patch count and Last deployment time. An installed-patch count indicates that deployment occurred. When no installed count is shown, review the deployment window and pending approved patches to determine whether the task completed its evaluation without installing a patch.
Click a task to open its details and monitor it.
APD tasks run cyclically. To check an upcoming run, open the task and review its deployment window and System View. Repeat this for each task you want to check.
To stop an active APD task from deploying its remaining patches, return to the APD task list and suspend the task. To prevent a particular missing patch from being deployed by other tasks, decline that patch separately.
System View
Under System View, you can see the number of patches installed, missing, and their deployment status in individual targets' perspective. If the latest application version is already installed on a computer, that application is not listed in the APD task for that computer. Last deployment time shown as -- means the APD task has not started. Installed-patch counts are current status, not live deployment outside the window.
If an online target remains pending after the applicable deployment window opens, modify the APD task and save it to trigger the task again, then monitor its System View. To verify whether a particular patch was installed through Endpoint Central, use the Deployed Time, Deployed Using, and Deployed By columns described in Installed Patches.
Patch View
Under Patch View, you can see patching information from each patch's perspective. It shows which patches need to be deployed, the number of systems where those patches are missing, and the number of systems where installation succeeded or failed.
An APD task can show Patching Completed with zero installed patches when no eligible approved patches match the task criteria. The Summary count can still include all target computers even when Deployment Details is empty because no missing patch has reached the configured Deploy patches after age. Confirm the patch release or approval date, approval status, selected patch types, and the deployment criteria.
Download Pending Patches
Under this section, you can see the download status of each patch, mentioned under the Remarks section. To download the pending patches, select those patches and click Download Patches.
Summary
By clicking on Summary, you can see the overall briefing about this particular APD task. If the patching has failed in any computers, it will also be mentioned in this section. To address the failure, click on Troubleshoot Now; you will be redirected to the Troubleshoot section.
To export a task report:
- Open the APD task and select the Summary tab.
- Click Export in the upper-right corner of the task details view.
- Select APD task summary or Deployment Troubleshooting summary. The selected report is exported as a PDF.
Troubleshoot
In this section, you can see the actual reason for the failure in each failed computer.To troubleshoot those issues, click on Read KB. This will take you to the Knowledge Base; the article which is designed to address that specific failure. To learn more about troubleshooting failures, refer to this page.
If you have any further questions, please refer to our Frequently Asked Questions section for more information.