Operator deploy Patches for windows but in an alternate site

1

Hi Guys,

I would like Operators to be able to view and deploy patches but not deploy them in the Patches for Windows site without making custom copies. Is this possible?

Thanks,

Peter

2

You could automate the creation of the copies of the patches you want them to have access to, but computers must be subscribed to a site for them to use the patches, and the operators must have access to the site and the computers they are deploying to.

Basically, the computers that an operator can deploy patches to is an intersection of the computers subscribed to the site the patches reside in, and the computers the operator has access to.

3

HI James,

I get that I was just hoping i could force the action into the operator’s site or an alternative site with the source fix let remain in the patching site. My use case is i want one department to be able to see actions of others but don’t want everyone who can see patching to see their actions.

Peter

4

That one department just needs management rights over all of the computers of whom they need to see the actions of.

5

If “Patches for Windows” has no computers assigned to it then they must make copies to both check relevance and to take actions. Making custom copies is also slightly less efficient as a method we use called digesting is only available on external sites and it makes groups of fixlets all go non relevant at once if they don’t match conditions.

And just a point, when an operator takes an action its not in the Patches for Windows site, it would be in their operator site or the mailbox site of the endpoint.

1 Like