{"id":75632,"date":"2023-06-05T13:10:46","date_gmt":"2023-06-05T17:10:46","guid":{"rendered":"https:\/\/jumpcloud.com\/?post_type=support&#038;p=75632"},"modified":"2024-02-05T13:51:46","modified_gmt":"2024-02-05T18:51:46","slug":"create-a-windows-patch-policy","status":"publish","type":"support","link":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy","title":{"rendered":"Create a Windows Patch Policy"},"content":{"rendered":"\n<p>JumpCloud\u2019s automated patch management helps you monitor which version and release your Windows, macOS, or Linux devices are currently using, and remotely schedule and install updates.&nbsp;You can create an OS patch management policy to control which devices will have the policy applied and when it will be applied.&nbsp;There are four Windows out-of-the-box patch policies that are ready to use. These policies are preconfigured with sane defaults.&nbsp;You can save time by using JumpCloud\u2019s default patch policies and policy groups that are preconfigured and ready to use. See&nbsp;<a href=\"#create-default-policy\">Create Default Patch Policies and Policy Groups<\/a>&nbsp;below.<\/p>\n\n\n\n<p>JumpCloud also provides a universal browser patch policy that keeps Google Chrome up to date for macOS, Windows, and Linux. See&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/create-a-universal-browser-patch-policy\" target=\"_blank\" rel=\"noreferrer noopener\">Create a Universal Browser Patch Policy<\/a>.<\/p>\n\n\n\n<p>Contact your Account Manager if you\u2019re interested in adding OS and browser patch management to your package or to learn more about&nbsp;<a href=\"https:\/\/jumpcloud.com\/platform\/patch-management\" target=\"_blank\" rel=\"noreferrer noopener\">Patch Management<\/a>. Pricing for patch management is located at&nbsp;<a href=\"https:\/\/jumpcloud.com\/pricing\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/jumpcloud.com\/pricing<\/a>.<\/p>\n\n\n\n<p>This article discusses the Advanced Windows Updates policy. For the Automatic MacOS Updates policy, see&nbsp;<a href=\"https:\/\/jumpcloud.com\/support\/create-a-macos-patch-policy\" target=\"_blank\" rel=\"noreferrer noopener\">Create a MacOS Patch Policy<\/a>. For the Linux Patch Management Policy, see&nbsp;<a href=\"http:\/\/jumpcloud.com\/support\/create-a-linux-patch-policy\" target=\"_blank\" rel=\"noreferrer noopener\">Create a Linux Patch Policy<\/a>.<\/p>\n\n\n\n<p><strong>Considerations<\/strong><\/p>\n\n\n\n<ul>\n<li>A&nbsp;restart of the device is required for the policy to take effect.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"create-default-policy\">Create Default Patch Policies and Policy Groups<\/h2>\n\n\n\n<p>If your organization has not yet configured any macOS, Windows, or Linux patch management policies or policy groups, you can save time by loading a set of default policies and policy groups. These patch policies and groups can save you time by enforcing security patches on a large number of managed devices.<\/p>\n\n\n\n<p>A policy group helps you quickly and efficiently roll out preconfigured policies using deployment rings. Deployment rings are configured with sane defaults. The deployment ring names match these policy group names, and control how and when an update is applied:<\/p>\n\n\n\n<ul>\n<li><strong>Vanguard&nbsp;<\/strong>&#8211; Deploy automated upgrades inside your IT Department.<\/li>\n\n\n\n<li><strong>Early Adoption<\/strong>&nbsp;&#8211; Deploy automated upgrades to early adopters outside of IT.<\/li>\n\n\n\n<li><strong>General Adoption<\/strong>&nbsp;&#8211; Deploy automated upgrades to general users in your company.<\/li>\n\n\n\n<li><strong>Late Adoption<\/strong>&nbsp;&#8211; Deploy automated upgrades to remaining users in your company.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"700\" height=\"422\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png\" alt=\"A diagram showing the deployments as sections of an angle, with the categories becoming broader as you move out from the center of the angle. The image starts with Vanguard adoption, then moves through Early, General, and Late Adoption.\" class=\"wp-image-79497\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/ring-deployments.png 700w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/04\/ring-deployments-300x181.png 300w\" sizes=\"(max-width: 700px) 100vw, 700px\" \/><\/figure>\n\n\n\n<p><strong>To create a default Windows patch policies and policy groups:<\/strong><\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Patch Management,&nbsp;<\/strong>then select the&nbsp;<strong>OS<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>If you haven\u2019t yet configured a patch policy or patch policy group, click&nbsp;<strong>Load Default Policies &amp; Policy Groups<\/strong>&nbsp;to create four out-of-the-box default policy groups. Each policy group contains three preconfigured deployment ring policies that are automatically bound to the group.<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"501\" height=\"286\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/configure-os-patch-policy.png\" alt=\"\" class=\"wp-image-82951\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/configure-os-patch-policy.png 501w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/configure-os-patch-policy-300x171.png 300w\" sizes=\"(max-width: 501px) 100vw, 501px\" \/><\/figure>\n\n\n\n<ol start=\"5\">\n<li>Review the preconfigured settings for the Windows default policies:<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-135\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"2\"\n           data-rows=\"14\"\n           data-wpID=\"135\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:43.416370106762%;                padding:10px;\n                \"\n                >\n                                Policy Name                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-bold\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:56.583629893238%;                padding:10px;\n                \"\n                >\n                                Default Setting                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Automatically Install minor updates                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" style=\"height:16px;\">\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A3\"\n                data-col-index=\"0\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Automatically Install Updates                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Automatic Updates Behavior                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Download the updates automatically and notify when they are ready to be installed.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A5\"\n                data-col-index=\"0\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Specify the day(s) of the week to install updates                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Every day.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A6\"\n                data-col-index=\"0\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Specify the time of day to install updates                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B6\"\n                data-col-index=\"1\"\n                data-row-index=\"5\"\n                style=\"                padding:10px;\n                \"\n                >\n                                0:00.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A7\"\n                data-col-index=\"0\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Install updates frequency                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B7\"\n                data-col-index=\"1\"\n                data-row-index=\"6\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Every week of every month.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A8\"\n                data-col-index=\"0\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Automatic Updates detection frequency                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B8\"\n                data-col-index=\"1\"\n                data-row-index=\"7\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A9\"\n                data-col-index=\"0\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Hours                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B9\"\n                data-col-index=\"1\"\n                data-row-index=\"8\"\n                style=\"                padding:10px;\n                \"\n                >\n                                1                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A10\"\n                data-col-index=\"0\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Automatically install updates during automatic maintenance                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B10\"\n                data-col-index=\"1\"\n                data-row-index=\"9\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A11\"\n                data-col-index=\"0\"\n                data-row-index=\"10\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Enable Windows Update Power Management to automatically wake up the system to install scheduled update                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B11\"\n                data-col-index=\"1\"\n                data-row-index=\"10\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.\u00a0                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A12\"\n                data-col-index=\"0\"\n                data-row-index=\"11\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Allow non-administrators to receive update notifications                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B12\"\n                data-col-index=\"1\"\n                data-row-index=\"11\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A13\"\n                data-col-index=\"0\"\n                data-row-index=\"12\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Display options for update notifications                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B13\"\n                data-col-index=\"1\"\n                data-row-index=\"12\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Checked.                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A14\"\n                data-col-index=\"0\"\n                data-row-index=\"13\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Display options for update notifications\u00a0                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B14\"\n                data-col-index=\"1\"\n                data-row-index=\"13\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Use the Default Windows Update notifications.\u00a0                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The Windows OS Patch Management policy modifies the Windows Updates for Business group policy settings on devices and allows administrators to keep Windows devices up to date with the latest security patches available to devices.<\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>Devices will receive updates based on the configured settings and the updates available to them through the Windows Updates for Business release channel. Microsoft determines what updates are released through which release channels based on the severity of the update and system impact.&nbsp;&nbsp;<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>Review the <strong>Deferral and Deadline<\/strong> <strong>Settings<\/strong> and the <strong>Update Enforcement &amp; Restart Settings<\/strong> in the Admin Portal for the four default Windows OS Patch Management policies below:<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-wpdatatables-wpdatatables-gutenberg-block\">\n<div class=\"wpdt-c row wpDataTableContainerSimpleTable wpDataTables wpDataTablesWrapper\n\"\n    >\n        <table id=\"wpdtSimpleTable-137\"\n           style=\"border-collapse:collapse;\n                   border-spacing:0px;\"\n           class=\"wpdtSimpleTable wpDataTable\"\n           data-column=\"4\"\n           data-rows=\"5\"\n           data-wpID=\"137\"\n           data-responsive=\"0\"\n           data-has-header=\"1\">\n\n                    <thead>        <tr class=\"wpdt-cell-row \" >\n                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"A1\"\n                data-col-index=\"0\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Deployment Ring Policy                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"B1\"\n                data-col-index=\"1\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Quality &amp; Feature Update Deferrals                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"C1\"\n                data-col-index=\"2\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Quality &amp; Feature Update Install Grace Period                <\/th>\n                                            <th class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text wpdt-bold\"\n                                    data-cell-id=\"D1\"\n                data-col-index=\"3\"\n                data-row-index=\"0\"\n                style=\" width:25%;                padding:10px;\n                \"\n                >\n                                Quality &amp; Feature Update commit and Restart Grace Period                <\/th>\n                                        <\/tr>\n                    <tbody>        <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A2\"\n                data-col-index=\"0\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Windows Vanguard                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B2\"\n                data-col-index=\"1\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                0 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C2\"\n                data-col-index=\"2\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                1 Day                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"D2\"\n                data-col-index=\"3\"\n                data-row-index=\"1\"\n                style=\"                padding:10px;\n                \"\n                >\n                                2 Days                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A3\"\n                data-col-index=\"0\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Windows Early Adopter                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B3\"\n                data-col-index=\"1\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                7 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C3\"\n                data-col-index=\"2\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                5 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"D3\"\n                data-col-index=\"3\"\n                data-row-index=\"2\"\n                style=\"                padding:10px;\n                \"\n                >\n                                2 Days                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A4\"\n                data-col-index=\"0\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Windows General Adoption                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B4\"\n                data-col-index=\"1\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                15 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C4\"\n                data-col-index=\"2\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                8 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"D4\"\n                data-col-index=\"3\"\n                data-row-index=\"3\"\n                style=\"                padding:10px;\n                \"\n                >\n                                2 Days                <\/td>\n                                        <\/tr>\n                            <tr class=\"wpdt-cell-row \" >\n                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"A5\"\n                data-col-index=\"0\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                Windows Late Adoption                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"B5\"\n                data-col-index=\"1\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                30 days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"C5\"\n                data-col-index=\"2\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                8 Days                <\/td>\n                                            <td class=\"wpdt-cell wpdt-align-left wpdt-valign-top wpdt-wrap-text\"\n                                    data-cell-id=\"D5\"\n                data-col-index=\"3\"\n                data-row-index=\"4\"\n                style=\"                padding:10px;\n                \"\n                >\n                                2 Days                <\/td>\n                                        <\/tr>\n                    <\/table>\n<\/div><\/div>\n\n\n\n<ul>\n<li><strong>Quality &amp; Feature Update Deferrals<\/strong>&nbsp;&#8211; Specify how many days to defer the availability of future quality and feature OS updates.<\/li>\n\n\n\n<li><strong>Quality &amp; Feature Update Install Grace Period<\/strong>&nbsp;&#8211; The number of days before available quality and feature updates are installed on devices automatically.<\/li>\n\n\n\n<li><strong>Quality &amp; Feature Update Commit and Restart Grace Period<\/strong>&nbsp;&#8211; Once an update has been installed and is pending commitment, specify the grace period for when the update restarts occur automatically to commit the update.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ol start=\"7\">\n<li>(Optional) Review your default policy groups and policies. The policies are automatically assigned to the appropriate group.<br><img decoding=\"async\" width=\"1907\" height=\"878\" class=\"wp-image-82762\" style=\"width: 900px\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups.png\" alt=\"\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups.png 1907w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups-300x138.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups-1024x471.png 1024w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups-768x354.png 768w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/default-pm-policy-groups-1536x707.png 1536w\" sizes=\"(max-width: 1907px) 100vw, 1907px\" \/><br>For example, the Vanguard Ring Policy Group automatically contains these three preconfigured deployment ring policies:\n<ul>\n<li>Linux (Ubuntu) Vanguard Ring<\/li>\n\n\n\n<li>MacOS Vanguard Ring<\/li>\n\n\n\n<li>Windows Vanguard Ring<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>If you created a default policy group and later try to add a policy with the same name, an error does not appear. Instead, the existing default policy will be used.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"8\">\n<li>(Optional) Select the&nbsp;<strong>Devices<\/strong> tab. Select one or more devices where you&#8217;ll apply this policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>.<\/li>\n\n\n\n<li>After the policy runs, you can view detailed results for a specific device:\n<ol start=\"1\" class=\"is-lower-alpha\">\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Devices<\/strong>.<\/li>\n\n\n\n<li>Select the&nbsp;<strong>Devices<\/strong>&nbsp;tab, then select the device.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Policy Results<\/strong>, then click&nbsp;<strong>view<\/strong>&nbsp;to see more details. An Exit Code of 0 means the policy ran successfully.<\/li>\n<\/ol>\n<\/li>\n\n\n\n<li>To delete a patch policy, select the checkbox next to the policy and click&nbsp;<strong>delete<\/strong>. The policy is removed from the OS Patch Management list.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Create a Windows Patch Management Policy<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">Creating the Policy<\/h3>\n\n\n\n<p>To create a Windows Patch Management Policy, you must first create a new policy, then configure settings of the policy.  <\/p>\n\n\n\n<p><strong>To create the Advanced Windows Updates policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Patch Management,&nbsp;<\/strong>then select the&nbsp;<strong>OS<\/strong>&nbsp;tab. Only OS patch policies appear in this tab.<\/li>\n\n\n\n<li>If this is the first time you\u2019ve accessed the OS&nbsp;tab, click&nbsp;<strong>Load Default Policies &amp; Policy Groups<\/strong>. See&nbsp;<a href=\"#create-default-policy\">Create Default Patch Policies and Policy Groups<\/a> above.<\/li>\n\n\n\n<li>Click (&nbsp;<strong>+<\/strong>&nbsp;) to add a new policy, then choose&nbsp;<strong>Windows<\/strong>.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>You can also use default patch policies to quickly create a policy. See&nbsp;<a href=\"#create-default-policy\">Creating a Default Windows Patch Management Policy<\/a> above.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<ol start=\"6\">\n<li>(Optional) On the <strong>New Policy<\/strong> panel, enter a new name for the policy or keep the default. Policy names must be unique.<\/li>\n\n\n\n<li>Next, configure the various settings of the policy.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card tip\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/tip-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Tip:<\/strong> \n<p>You can save the policy at this point, but it will not take effect until you apply it to a device or device group. <\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Configuring Update Settings <\/h3>\n\n\n\n<p><strong>To configure the Update Settings for the Advanced Windows Updates policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Select&nbsp;<strong>Automatically install minor updates<\/strong>&nbsp;to have Windows automatically install all minor updates that do not require a reboot.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Automatically Install Updates&nbsp;<\/strong>to automatically install updates based on these fields:\n<ul>\n<li><strong>Automatic Updates Behavior&nbsp;<\/strong>&#8211; Choose the behavior that controls when new updates are ready to install.<\/li>\n\n\n\n<li><strong>Specify The Day(s) Of The Week To Install Updates<\/strong>&nbsp;&#8211; Choose when to install updates. This field is applicable only when the Automatic Updates Behavior field is set to&nbsp;<strong>Automatically download updates and install them on the schedule specified below<\/strong>.<\/li>\n\n\n\n<li><strong>Specify the Time Of Day To Install Updates&nbsp;<\/strong>&#8211; Choose what time the updates will be installed. This field is applicable only when the<strong>&nbsp;Automatic Updates field is set to Automatically download updates and install them on the schedule specified below<\/strong>.<\/li>\n\n\n\n<li><strong>Install Updates Frequency&nbsp;<\/strong>&#8211; Choose the frequency of when updates are installed. This field is applicable only when the Automatic Updates field is set to&nbsp;<strong>Automatically download updates and install them on the schedule specified below<\/strong>. The options are:\n<ul>\n<li>Every week of every month<\/li>\n\n\n\n<li>First week of every month<\/li>\n\n\n\n<li>Second week of every month<\/li>\n\n\n\n<li>Third week of every month<\/li>\n\n\n\n<li>Fourth week of every month<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Automatic Updates detection frequency<\/strong>&nbsp;to set the number of hours the device will wait between checks for Windows updates.\n<ul>\n<li><strong>Hours&nbsp;<\/strong>&#8211; Choose the number of hours.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Automatically install updates during automatic maintenance&nbsp;<\/strong>to install updates during times when the PC is not in use. This preempts any schedule set in previous fields.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Include updates for other Microsoft products&nbsp;<\/strong>to get updates for other Microsoft products (in addition to Windows) when automatically updating.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Do not include drivers with Windows Update&nbsp;<\/strong>so that drivers are not automatically downloaded with the Windows Updates.&nbsp;<\/li>\n\n\n\n<li>Select&nbsp;<strong>Remove access to \u201cPause Updates\u201d feature&nbsp;<\/strong>to prevent your users from pausing automatic updates.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Remove access to use all Windows Update features&nbsp;<\/strong>to prevent your users from manually checking for new Windows Updates.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Enable Windows Update Power Management to automatically wake up the system to install scheduled updates&nbsp;<\/strong>to allow Windows Update to automatically wake the device from sleep mode to install updates. This occurs both when the updates are pushed to the system and if an install deadline passes while the device is in sleep mode. If the system is on battery power when Windows Update wakes it, it will not install updates and the system will automatically return to sleep in two minutes.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Disable Feature Upgrades via Windows Update&nbsp;<\/strong>to prevent the Windows Update Service from installing feature upgrades. You can install upgrades manually if necessary.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Disable Safeguards for Feature Updates&nbsp;<\/strong>to specify whether device safeguard holds can block feature updates from downloading.&nbsp;<\/li>\n\n\n\n<li>Select&nbsp;<strong>Manage preview builds&nbsp;<\/strong>to control preview builds from downloading to the device.\n<ul>\n<li><strong>Set The Behavior For Receiving Preview Builds&nbsp;<\/strong>&#8211; Choose whether users can disable or enable preview builds.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Select the target<\/strong>&nbsp;to specify a Feature Update version to be requested in subsequent scans.\n<ul>\n<li><strong>Which Windows Product Version Would You Like To Receive Feature Updates For&nbsp;<\/strong>&#8211; Specify the Windows product (for example, Windows 10) to request in subsequent scans. For a list of available products and versions, see&nbsp;<a target=\"_blank\" href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/supported-versions-windows-client\" rel=\"noreferrer noopener\">Supported versions of Windows client<\/a>.<\/li>\n\n\n\n<li><strong>Target Version for Feature Updates&nbsp;<\/strong>&#8211; Specify the Windows version (for example, 22H2) to request in subsequent scans.<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Configuring Notifications Settings<\/h3>\n\n\n\n<p><strong>To configure the Notifications Settings of the policy<\/strong>:<\/p>\n\n\n\n<ol start=\"1\">\n<li>Select&nbsp;<strong>Configure auto-restart required notification for updates&nbsp;<\/strong>to specify the method by which the auto-restart required notification is dismissed. If selected, the&nbsp;<strong>Specify Method To Dismiss Auto-Restart Notification<\/strong>&nbsp;dropdown menu displays with the following options:\n<ul>\n<li><strong>Auto&nbsp;<\/strong>&#8211; The notification is automatically dismissed after 25 seconds. This is the default option.<\/li>\n\n\n\n<li><strong>User Action<\/strong>&nbsp;&#8211; The user has to manually dismiss the notification.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Configure auto-restart reminder notification for updates<\/strong>&nbsp;to specify the amount of time prior to a scheduled restart to notify your users. If selected, the<strong>&nbsp;Specify Reminder Period for Auto-Restart In Minutes&nbsp;<\/strong>dropdown menu displays with the following options:\n<ul>\n<li>15<\/li>\n\n\n\n<li>30<\/li>\n\n\n\n<li>60<\/li>\n\n\n\n<li>120<\/li>\n\n\n\n<li>240<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Configure auto-restart warning notification schedule for updates<\/strong>&nbsp;to specify when notifications are displayed to warn users that there is a scheduled restart for update installation. Users are not able to postpone the scheduled restart once the deadline has been reached and the restart is automatically executed. Two fields appear when selected:\n<ul>\n<li><strong>Specify The Period for Auto-Restart Reminder Hours&nbsp;<\/strong>&#8211; Specifies the number of hours prior to a scheduled restart to warn the user. Used in conjunction with the following field.<\/li>\n\n\n\n<li><strong>Specify The Period For Auto-Restart Warning Minutes&nbsp;<\/strong>&#8211; Specifies the number of minutes prior to a scheduled restart to warn the user. Used in conjunction with the previous field.&nbsp;<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Allow non-administrators to receive update notifications&nbsp;<\/strong>to control whether non-administrative users will receive update notifications based on the Automatic Updates Behavior policy setting, described in the Update Settings section above.&nbsp;<\/li>\n\n\n\n<li>Select&nbsp;<strong>Display options for update notifications&nbsp;<\/strong>to specify which Windows Update notifications your users will see. If selected, the&nbsp;<strong>Select Update Notification Option&nbsp;<\/strong>drop-down displays with the following options:\n<ul>\n<li><strong>Use the default Windows Update notifications<\/strong><\/li>\n\n\n\n<li><strong>Turn off all notifications, excluding restart warnings<\/strong><\/li>\n\n\n\n<li><strong>Turn off all notifications, including restart warnings<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Configuring Deferral and Deadline Settings<\/h3>\n\n\n\n<p><strong>To configure the Deferral and Deadline Settings of the policy of the policy:<\/strong><\/p>\n\n\n\n<ol start=\"1\">\n<li>Select<strong>&nbsp;Defer Updates (Windows 10 and Server 2016 or higher)<\/strong>&nbsp;to prevent updates from automatically installing for up to 1 month after release. This does not affect definition updates. Supported by Windows 10 and Server 2016 and later. If selected, two additional fields appear:<\/li>\n<\/ol>\n\n\n\n<ul>\n<li><strong>Number Of Days To Defer<\/strong>&nbsp;\u2013 Specifies the number of days to prevent updates from automatically installing, up to 30 days.<\/li>\n\n\n\n<li><strong>Pause Update Installation Starting On This Date (Yyyy-Mm-Dd)<\/strong>&nbsp;\u2013 Pauses update installation beginning on the specified date, for up to 35 days (or until cleared). To resume normal update installation, leave this field blank.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ol start=\"2\">\n<li>Select&nbsp;<strong>Defer feature upgrades<\/strong>&nbsp;to defer automatic feature upgrade installation by the specified number of days, up to 8months. Only applicable if upgrade deferrals are enabled.&nbsp;If selected, three additional fields appear:\n<ul>\n<li><strong>Number Of Days To Defer Feature Upgrades&nbsp;<\/strong>\u2013 Specifies the number of days to defer upgrades, up to 8 months.&nbsp;<\/li>\n\n\n\n<li><strong>Upgrade Channel&nbsp;<\/strong>\u2013 Specifies the upgrade channel. A telemetry level of 2 is required for Preview builds (and your domain must be registered with the Windows Insider Program). For all other feature upgrade deferrals, telemetry must be set to at least 1. Note that Windows 10 1703 only supports Current Branch and Current Branch for Business and 1709 supports all 5 options.<\/li>\n\n\n\n<li><strong>Pause Update Installation Starting On This Date (Yyyy-Mm-Dd)&nbsp;<\/strong>\u2013 Pauses update installation beginning on the specified date, for up to 35 days (or until cleared). To resume normal update installation, leave this field blank.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Configure the Update Enforcement &amp; Restart Settings:<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Configuring the Update Enforcement &amp; Restart Settings <\/h3>\n\n\n\n<p><strong>To configure the Update Enforcement &amp; Restart Settings of the policy:<\/strong><\/p>\n\n\n\n<ol start=\"1\">\n<li>Select<strong>&nbsp;Specify deadline for restart<\/strong>&nbsp;to set a deadline for the automatic restart necessary to complete the update.\n<ul>\n<li><strong>Specify The Deadline For The Automatic Restart (In Days)<\/strong>&nbsp;&#8211; Enter the number of days for the automatic restart to complete the update. The update will occur outside of active hours. If the<em>&nbsp;No auto-restart with logged on users for scheduled automatic updates<\/em>&nbsp;field and the<em>&nbsp;Always automatically restart at a scheduled time<\/em>&nbsp;field are both selected, then this field will have no effect.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select<strong>&nbsp;No auto-restart with logged on users for scheduled automatic updates<\/strong>&nbsp;to stop an automatic restart after an update was automatically installed while users are logged in. Instead, users will be notified that they should reboot for the update to take effect. This only applies when Automatic Updates are selected in the Update Settings section.&nbsp;<\/li>\n\n\n\n<li>Select&nbsp;<strong>Turn off auto-restart for updates during active hours<\/strong>&nbsp;to control if a device will automatically restart after downloading updates during active hours.\n<ul>\n<li><strong>Active Hours Start<\/strong>&nbsp;&#8211; Choose the beginning of active hours.<\/li>\n\n\n\n<li><strong>Active Hours End<\/strong>&nbsp;&#8211; Choose the end of active hours.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select<strong>&nbsp;Specify active hours range for auto-restarts<\/strong>&nbsp;to determine the most hours in a day that a user can set as active hours. If you disable or do not configure this policy, the value is set to 10 hours.\n<ul>\n<li><strong>Max Active Hours<\/strong>&nbsp;&#8211; Choose the maximum number of active hours allowed in one day.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Always automatically restart at the scheduled time&nbsp;<\/strong>to force a restart of a user\u2019s device after a specified time after the initial Windows Update installation.\n<ul>\n<li><strong>Number of Minutes Between Update And Forced Restart<\/strong>&nbsp;&#8211; Enter the number of minutes. Valid values are 15-180 minutes. If the&nbsp;<em>No auto-restart with logged on users for scheduled automatic updates installations<\/em>&nbsp;field is selected, then this field will have no effect.<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Select&nbsp;<strong>Specify deadlines for automatic updates and restarts<\/strong>&nbsp;to specify the number of days before quality and feature updates are automatically installed on your devices, and also specify a grace period after which required restarts occur automatically. \u200b\u200bThis policy overrides the following settings:&nbsp;<em>Specify deadline before auto-restart for update installation, auto-restart notification settings, always automatically restart at the scheduled time, Automatically Install Updates<\/em>.\n<ul>\n<li><strong>Quality update installation grace period<\/strong>&nbsp;&#8211; Specifies the number of days, from 0 to 30, that a user has before feature updates are installed on their devices automatically. Devices must restart after installation to upgrade to the latest version.&nbsp;<\/li>\n\n\n\n<li><strong>Quality update commit and restart grace period<\/strong>&nbsp;&#8211; Specifies a minimum number of days, from 0 to 7, after the installation grace period that a device restart will occur automatically to trigger the quality update installation.&nbsp;<\/li>\n\n\n\n<li><strong>Feature update installation grace period<\/strong>&nbsp;&#8211; Specifies the number of days a user has, from 0 to 30, before feature updates are installed on their devices automatically. Devices must restart after installation to upgrade to the latest version.&nbsp;<\/li>\n\n\n\n<li><strong>Feature update commit and restart grace period<\/strong>&nbsp;&#8211; Specifies a minimum number of days, from 0 to 7, after the installation grace period that a restart will occur automatically to trigger the feature update installation.&nbsp;<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">Applying the Policy to a Device <\/h3>\n\n\n\n<p><strong>To apply the patch policy to a device:<\/strong><\/p>\n\n\n\n<ol start=\"1\">\n<li>In the policy, select the&nbsp;<strong>Device Groups<\/strong>&nbsp;tab. Select one or more device groups where you&#8217;ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.<\/li>\n\n\n\n<li>Select the&nbsp;<strong>Devices&nbsp;<\/strong>tab. Select one or more devices where you&#8217;ll apply this policy.<\/li>\n\n\n\n<li>Click&nbsp;<strong>save<\/strong>, then click&nbsp;<strong>save&nbsp;<\/strong>again if prompted. The configured policy appears in the&nbsp;<strong>OS<\/strong>&nbsp;tab.<\/li>\n<\/ol>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card note\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/note-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Note:<\/strong> \n<p>The JumpCloud Agent will download the patch policy automatically, but there may be a delay between implementation and when the policy takes effect on the local device.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card warning\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/warning-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Warning:<\/strong> \n<p><strong>A&nbsp;restart of the device is required for the policy to take effect.<\/strong><\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Force the Patch Policy to Apply on a Device<\/h2>\n\n\n\n<p>To force the policy to take effect as soon as possible, you can manually run a Group Policy Update on the device:<\/p>\n\n\n\n<ol>\n<li>Wait at least 60 seconds for the JumpCloud Agent to download the policy updates to the local devices.<\/li>\n\n\n\n<li>Open the Windows Command Prompt on the local device and run the&nbsp;<kbd>gpupdate \/force<\/kbd>&nbsp;command.<\/li>\n\n\n\n<li>Restart the device.<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\">Alert Behavior of OS Updates<\/h2>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"alignleft size-full\"><img decoding=\"async\" width=\"295\" height=\"203\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/policy_win_windows_updates_restart_window.png\" alt=\"\" class=\"wp-image-82826\" \/><\/figure><\/div>\n\n\n<p>The alerts for updates using the JumpCloud Patch Management policies are delivered to users via the default system notifications on Windows. This aligns with Microsoft&#8217;s recommendations and leverages Windows Updates\u2019 built-in intelligence for prompting users and scheduling restarts.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Specify a Target Feature Version<\/h2>\n\n\n\n<p>The default Patch Management policies configure update settings to get Windows devices fully up to date with any feature and make quality updates available to them. Admins can target a specific Windows feature version to prevent devices from upgrading to the latest available feature update and stay at a specific feature version.&nbsp;<\/p>\n\n\n\n<p>To specify a specific Windows feature version:&nbsp;<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Patch Management,&nbsp;<\/strong>then select the&nbsp;<strong>OS<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Navigate to&nbsp;<strong>Update Settings<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Select the target<\/strong>.<\/li>\n\n\n\n<li>Fill in the fields shown below:<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"919\" height=\"286\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/05\/policy_win_pm_target_version.png\" alt=\"\" class=\"wp-image-82825\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/policy_win_pm_target_version.png 919w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/policy_win_pm_target_version-300x93.png 300w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/05\/policy_win_pm_target_version-768x239.png 768w\" sizes=\"(max-width: 919px) 100vw, 919px\" \/><\/figure>\n\n\n\n<p>Available values for the Windows product version include:<\/p>\n\n\n\n<ul>\n<li>Windows 11<\/li>\n\n\n\n<li>Windows 10<\/li>\n<\/ul>\n\n\n\n<p>Available values for the Target Version at this time are all applicable to Windows 10:<\/p>\n\n\n\n<ul>\n<li>21H2<\/li>\n\n\n\n<li>22H2<\/li>\n<\/ul>\n\n\n\n<div class=\"wp-block-cgb-notification-card-wysiwyg notification-card important\"><div class=\"notification-card-content\"><div class=\"notification-card-icon\"><p><img decoding=\"async\" src=\"\/wp-content\/themes\/jumpcloud\/assets\/images\/gutenberg-blocks\/important-icon.png\" \/><\/p><\/div><div class=\"notification-card-copy is-type-body-default\"><div><strong class=\"notification-card-type\">Important:<\/strong> \n<ul>\n<li>This setting cannot be used to roll back a device to a previous feature version. If you enter an invalid value, devices will stay at their current version until you correct the values to a supported product and version.<\/li>\n\n\n\n<li>If the Target Version defined has reached End of Support by Microsoft, devices will receive no further updates.\n<ul>\n<li>For example, version 21H2 of Windows 11 Home, Pro, Pro Education, and Pro for Workstation have reached end of service.<\/li>\n\n\n\n<li>See Microsoft&#8217;s <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/release-health\/supported-versions-windows-client\" target=\"_blank\" rel=\"noreferrer noopener\">Supported versions of Windows client<\/a> and <a href=\"https:\/\/jumpcloud.com\/support\/prepare-now-for-end-of-support#windows-end-of-support\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud Windows End of Support<\/a> and for more information.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n <\/div><\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Remove a Patch Policy<\/h2>\n\n\n\n<p><strong>To remove a Patch Policy<\/strong>:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal:&nbsp;<a target=\"_blank\" href=\"https:\/\/console.jumpcloud.com\/login\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.&nbsp;<\/li>\n\n\n\n<li>Go to&nbsp;<strong>DEVICE MANAGEMENT &gt; Policy Management<\/strong>.<\/li>\n\n\n\n<li>Select&nbsp;<strong>Patch Management,&nbsp;<\/strong>then select the&nbsp;<strong>OS<\/strong>&nbsp;tab.<\/li>\n\n\n\n<li>Select the policies that you wish to remove.<\/li>\n\n\n\n<li>Click&nbsp;<strong>Delete<\/strong>.<\/li>\n\n\n\n<li>Click&nbsp;<strong>continue<\/strong>.<\/li>\n<\/ol>\n\n\n\n<p>The selected policies are removed.&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>JumpCloud\u2019s automated patch management helps you monitor which version and release your Windows, macOS, or Linux devices are currently using, [&hellip;]<\/p>\n","protected":false},"author":203,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"support_category":[2852,2862,2924],"support_tag":[],"coauthors":[2837,3011],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Create a Windows Patch Policy - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Create a Windows Patch Policy\" \/>\n<meta property=\"og:description\" content=\"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-05T18:51:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"17 minutes\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"derekpietras, nickconrad\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy\",\"url\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy\",\"name\":\"Create a Windows Patch Policy - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png\",\"datePublished\":\"2023-06-05T17:10:46+00:00\",\"dateModified\":\"2024-02-05T18:51:46+00:00\",\"description\":\"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Support\",\"item\":\"https:\/\/jumpcloud.com\/support\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Create a Windows Patch Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Create a Windows Patch Policy - JumpCloud","description":"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy","og_locale":"en_US","og_type":"article","og_title":"Create a Windows Patch Policy","og_description":"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.","og_url":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy","og_site_name":"JumpCloud","article_modified_time":"2024-02-05T18:51:46+00:00","og_image":[{"url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"17 minutes","Written by":"derekpietras, nickconrad"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy","url":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy","name":"Create a Windows Patch Policy - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png","datePublished":"2023-06-05T17:10:46+00:00","dateModified":"2024-02-05T18:51:46+00:00","description":"Learn about JumpCloud Patch Management and available patch policy settings on Windows devices. Learn how to utilize default patch policies, or create custom policies.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#primaryimage","url":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png","contentUrl":"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/04\/ring-deployments.png"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/support\/create-a-windows-patch-policy#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Support","item":"https:\/\/jumpcloud.com\/support"},{"@type":"ListItem","position":3,"name":"Create a Windows Patch Policy"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75632"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/support"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/203"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75632\/revisions"}],"predecessor-version":[{"id":105165,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support\/75632\/revisions\/105165"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=75632"}],"wp:term":[{"taxonomy":"support_category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_category?post=75632"},{"taxonomy":"support_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/support_tag?post=75632"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=75632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}