Microsoft

System Center Configuration Manager Feedback

How can we improve Configuration Manager?

Maintenance window relative to patch Tuesday

Maintenance window relative to patch Tuesday

It would be very helpful to be able to set maintenance windows to be relative to Patch Tuesday. For example, apply patches on the 1st Saturday after patch Tuesday, or the second Sunday after patch Tuesday. Since patch Tuesday changes each month, the current "second Saturday of the month" type options are not useful when Patch Tuesday could fall before or after that depending on the calendar.

116 votes
Vote
Sign in
Check!
(thinking…)
Reset
or sign in with
  • facebook
  • google
    Password icon
    Signed in as (Sign out)
    You have left! (?) (thinking…)
    Sean McHugh shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →
    Noted  · 

    9 comments

    Sign in
    Check!
    (thinking…)
    Reset
    or sign in with
    • facebook
    • google
      Password icon
      Signed in as (Sign out)
      Submitting...
      • Russ Rimmerman commented  ·   ·  Flag as inappropriate

        It's nice to see the added Offset option to ADRs, but not having it available in Maintenance Windows as well still makes it tricky to use the ADR offset feature since the maintenance window doesn't have the same feature and may not align properly with the ADR two months out of the year unless we manually change the maintenance window those two months.

      • Dennis commented  ·   ·  Flag as inappropriate

        The entire IT world revolves around patch Tuesday, and yet Microsoft's patching product has no way to scheduled tasks relative to this event. My conclusion is that no one associated with SCCM development has any experience actually patching servers in an enterprise. Microsoft appears to be indifferent that each individual customer must re-invent the wheel.

      • Gordon Schillinger commented  ·   ·  Flag as inappropriate

        I had asked our PFE/DSE's for this for several years and explained how the current scheduling does not accommodate the month to month drift. Very happy to see this requested. Would be a huge time savings not to have to edit and set 30+ maintenance windows every month.

      • Scott Williams commented  ·   ·  Flag as inappropriate

        One thing to keep in mind is that "patch Tuesday" is not the same in all timezones. In Australia it falls on a Wednesday, and if a Wednesday is the first day of the month then schedules relative to the 2nd Wednesday won't match up. "Patch Tuesday" would need to be a localised date.

      • Harshal commented  ·   ·  Flag as inappropriate

        Yes this feature will make life easier for creating one time maintenance window for complete year. Thanks

      • Nathan Nitzel commented  ·   ·  Flag as inappropriate

        The idea of having a logic type schedule may sound convoluted but it would be a huge help in automating things. Example logic: Patch this Device Collection on the 1st/2nd/3rd/4th *name of day* that occurs after *2nd Tuesday* + *Days/Hours* between the times of *1:00AM* and *5:00AM*. It could be something like how Outlook rules are setup with clickable drop downs for the different variables. I know this has been a huge struggle for us for getting testing done for 1 week then getting things patched within 30 days for things like PCI compliance.

      • Paul Vasquez commented  ·   ·  Flag as inappropriate

        Here is what other patch management systems (shavlik) are using to allow MS tuesdays scheduling, this could be used as example to add this feature to SCCM so it will be costant to the numbers of days after patch tuesdays:

        "Patch Tuesday + X (days) Scheduling
        When scheduling console scans, you now have the ability to delay a recurring scan by a number of days to coincide with a regular event. For example, you might schedule a monthly patch scan to occur the day after Patch Tuesday by using the new Add delay (days) option."

        Hopefully this is useful to explain our need and possibilities

      • Steve Thompson commented  ·   ·  Flag as inappropriate

        April 2016 is another month that this feature could help. Another technique would allow a maintenance window + n days from Patch Tuesday. This month (April) Maintenance Windows fails with a 2nd Saturday for a dev server collection, as the 2nd SAT is actually before Patch Tuesday. Jan 2016 is another month with the same issue.

      Feedback and Knowledge Base