Simplify Cross-platform OS Patch Management with Deployment Rings

Written by Scott Reed on June 2, 2022

Share This Article

Admins can now seamlessly manage cross platform patch policies using automated OS Patch Policy default groups built around a deployment ring implementation model. Each OS Patch Policy default group is configured with best practice defaults, one for macOS, one for Windows, and one for Linux (Ubuntu). 


Forward thinking organizations realize that the device they provide to an employee, and the operating system that resides on it, is their primary vehicle to make work happen; this means the device experience has become a critical factor in determining the success of any employee. Therefore, it stands to reason then that by giving their employees the autonomy to choose which device they can work from, they are setting their employees up for success. However, without a strategy and the proper technology to properly manage a diverse ecosystem of devices, IT pays the price for this newfound convenience and productivity.

Cross-platform device management is an evolving space, and IT admins are realizing that new tooling and strategies are needed to meet compliance and security standards across multiple operating systems. For example, ensuring devices are patched to the latest and most secure operating system is a key responsibility of any IT organization. But, since the acceleration of remote work and device choice, this process has gotten more and more complex. What once could be completed via a company wide email and a planned maintenance window now requires an alternative or different approach.

Today, a key lever to an effective patch management strategy is finding an efficient way to deploy the latest patches that doesn’t overwhelm or negatively impact end users. Deployment rings, AKA the “one, some, many” deployment model, have been a best practice strategy for deploying updates across a fleet of devices for some time. But this approach can be time consuming when you consider each operating system, as well as each deployment ring, requires its own distinct policy and fine-tuning.

JumpCloud Patch Management

To simplify the implementation of patches, JumpCloud offers turn-key patch management policies for macOS, Windows, and Linux (Ubuntu) that are pre-configured against four default policies to help admins roll out updates using a ring deployment model. By simply adding devices, regardless of OS, to one of the preconfigured policy groups, admins can configure deployment waves that enforce updates on a cycle that ensures end users are secure without unintentionally disrupting their ability to make work happen. Admins can also update adoption based on their organizations needs at any time. This new addition to JumpCloud Patch Management streamlines the entire process and saves time, resources, and effort so admins can worry less about the intricacies of patch management and work on other tasks instead.


Learn more about cross platform OS patch management using default policy groups.

Scott Reed

Scott Reed is a Product Manager on the Devices team at JumpCloud. Prior to joining the Product team, he led the Solution Architecture team at JumpCloud. In fact, Scott is the original author of the JumpCloud PowerShell module. Scott’s background is in Corporate IT. Outside of work Scott loves to seek out fresh air and adventure with his wife, two young sons, and their black lab Lucy.

Continue Learning with our Newsletter