Patch Management and Windows 10 Enterprise 2016 LTSB

[Ain Abdullah]

I have a few questions about available updates for this OS. Been reading Microsoft's document about differences between feature and quality updates but I am still unsure of a few things related to Patch Management.

 

1. Is there any reason for Windows 10 LTSB updates not available in Patch Management? 

 

2. Since when do Patch Management stop offering updates for Windows 10 LTSB? As per screenshot, the most recent update available in Patch Management dated 2021.

I have checked https://knowledge.broadcom.com/external/article/184947/windows-10-enterprise-2016-ltsb-version.html, and Patch Management was not listed.

 

3. In a simple word, how is Software Management and Patch Management different?

 

Thanks.

 

Regards,

Ain Abdullah

[Dmitri Gornev]

Hi Ain,

1. They are indeed available in Patch Management - for example, MS23-06-W10-5027219 from June 2023 Patch Tuesday:

2. Unfortunately, screenshot is missing so I cannot comment. As demonstrated above, the recent Windows 10 2016 LTSB updates are available in patch datafeed.

Good catch regarding KB - it's wrong and we'll have it fixed.

You can check in Client OS support matrix that this OS is fully supported.

3. In terms of Symantec IT Management products, Patch Management specializes on deploying updates for already installed software. It's limited to software and related updates covered in patch datafeed but for them provides full data - including detailed descriptions, release and supersedence information, download URLs, detection rules, installation command lines, etc.

Software Management requires some involvement from administrator to provide installation packages and configure deployment instructions but is more flexible in coverage of all possible installation, uninstallation and upgrade scenarios.

[Hannah Massie]

The key thing between software management and patch management is that the patch policies are virtual policies. The plus is this enables multiple patch packages to be delivered to clients from a single policy without having to do very much. Added to this the system takes care of superseded patches and of the targets and packages. The downside it is not easy to track successes and failures of a particular patch delivery policy. while editing of policies could also be a little easier too. With software management you are responsible for the package the install commands, targets etc. etc. so there is much more to do. Patch is good if set up correctly! 

[Riggzie]

As Hannah said, Software management you need to create everything down to the command line whereas patch management is where Broadcom has provided everything for us in a simple right click, deploy method.

Example here..

Windows XP went EOL, but we still took the patches off of microsoft's website and set them up as software management deployments. It was a pain to download every one, set them up, setup dynamic targeting and all that.. it was doable but it just took a lot of work.

Patch Management makes live much easier.