What happens on a device during remediation

A repair job can include remediation for one or more detected security definitions. Furthermore, a single detected definition can require the installation of one or more patches to remediate.

Almost all patch files install silently, requiring no user interaction at the end-user device itself. Some non-English patches do not install silently. You can tell whether a patch installs silently or not by checking the Silent Install column in the definition details.

However, whether a patch file can install silently or not, you can configure how much you want the security scanner to display and prompt for input on the end-user device with the scan and repair settings.

If a patch file installation requires a reboot and the settings for the task allow a reboot, Patch and Compliance first installs all of the patches for the task on the device, and then reboots the device once.