Managed vs Unmanaged Patching

Microsoft Windows updates are a critical — albeit annoying — part of our lives.

Updates patch security vulnerabilities to protect your organization from known threats, but they also fix bugs, improve computer performance and introduce new features.

We often get asked why people can’t update their computers as they see fit or why we manage it in the first place.

The truth is: patching is not a perfect science, whether it’s managed or unmanaged. There will be problems. But as a managed service provider, we do our best to limit those problems.

Let’s dive into the details of what managed patching looks like (when an MSP handles your patching) vs. unmanaged patching (when you do it yourself).

Managed Patching

Managed patching allows us to apply updates we know are secure, safe, and stable, and block patches known to cause issues with other programs. If we discover an applied patch breaks other programs, we can retract the patch, returning to the previous version.

Our patching schedule is the same each week — and takes place after regular working hours — so if you forget to leave your computer on, you’ll be forced to apply patches the next business day, which could result in work disruptions.

Our patching covers most of the common applications, including Windows, Office applications, internet browsers, PDF readers and file compressors.

With managed patching, it’s common for the Windows Update app in your settings to claim there are missing patches. On the surface, it appears that we missed something, but this is more likely due to a pending reboot, or that the Windows update app is misreading old cached data.

We control patching, but Microsoft controls the Windows Update app.

Pros

• It’s automated
• They are applied during off-hours
• Can be retracted if they cause issues with other software
• Takes care of most common software

Cons

• Sometimes an extra reboot is required during regular hours
• Windows might think you are “missing patches”
• Doesn’t cover line-of-business software

Unmanaged Patching

Unmanaged patching is a bit more inconsistent. The user decides when and how often patches are applied. It also means you’re responsible for patching everything, not just Windows.

Some users may be diligent and apply updates weekly, but others may forget or even refuse to apply patches. Even with auto updates enabled, patches may not be applied promptly if you forget to restart your computer.

Missing patches can result in missed security updates that protect your organization from known threats.

If an update breaks other programs, an unmanaged device can revert to an earlier version. But it’s up to the individual to know how to do that.

Pros

• They are applied on your schedule
• You’ll see fewer “missing patches” notifications

Cons

• You could miss critical security updates
• You might be prompted to update during normal working hours
• You have to remember to do them all individually
• It’s harder to retract

Managed Patching Offers the Best Protection

Want us to assess your patching posture? Contact us today to schedule a consultation, and we’ll detail how patching keeps your organization safe while minimizing downtime.

Stay updated! Get tips and insights delivered to your inbox weekly by subscribing to our newsletter.