Patch for Windows® Servers, powered by Shavlik

> Administration > Configuring Program Options > Patch Options

Patch Options

The Patch Options dialog allows you to specify patch scanning and deployment options.

 

Default Patch Scan Template

The scan template you wish to set as the default when performing patch scans.

Use only the browse list (scan by domain only)

When scanning domains, the machines scanned are those contained in the "browse list" of machines in your Microsoft network rather than all the machines in the domain as specified by the domain controller. Using this option will typically reduce the number of machines that the program will attempt to connect to when performing the scan. For more information, see Enumerating Machines.

Always enforce machine group exclusions

When using multiple machine groups in a scan operation, if a machine is excluded from one machine group but is included in another, the machine will be excluded from the operation. If the Always enforce machine group exclusions check box is not enabled, for this same situation the machine will be included in the operation.

Examples:

On the home page you select two machine groups that you want to scan. MachineA is excluded from one group but is included in the other group. If the Always enforce machine group exclusions check box is enabled, MachineA will not be included in the scan. If the Always enforce machine group exclusions check box is not enabled, MachineA will be included in the scan.

You scan a nested group that consists of two groups. In one of the groups the domain ABC.com is excluded, while the other group contains three machines from the ABC.com domain. If the Always enforce machine group exclusions check box is enabled, the three machines will not be included in the scan. If the Always enforce machine group exclusions check box is not enabled, the three machines will be included in the scan.

Use replacement patches

Instructs Ivanti Patch for Windows® Servers to only scan for patches that are not replaced, ignoring patches that have been replaced by other patches. For example, instead of reporting on all missing Internet Explorer patches, only the latest and most current IE patches will be reported.

Keep imported files

The results files used by a scan operation are stored on disk indefinitely rather than being deleted after the results are imported into the program.

Connection timeout (seconds)

The maximum amount of time to wait for a target machine to respond to the console during a scan. If the console cannot make a connection to the target machine in the specified number of seconds the machine is skipped. A connection attempt may timeout earlier than the specified value, this simply puts a maximum value on the wait time.

Global thread pool

Specifies the total number of threads that can be used during a patch scan or deployment, an asset scan or a power status scan. The value you specify will be multiplied by the number of logical CPUs on the console machine to determine the maximum number of threads that may be used during a scan instance. One thread will be used to scan one machine, so if you specify a maximum of 64 threads it means that 64 machines can be simultaneously scanned during one scan. Allowing many machines to be scanned at the same time requires more network resources. Reduce this number if you are scanning over a slow link.

Default Deployment Template

Specifies the deployment template to use as the default.  Any new deployment templates you previously defined will be included in the drop-down list. For more information see About Deployment Templates.

Create a temporary system drive share if none exists

Enables Ivanti Patch for Windows® Servers to create and use a temporary administrator share name on a target machine during the authentication process. The share name will be removed from the target machine when the scan or deployment is complete.

While this option does not apply to most organizations, if you are an organization that for whatever reason has disabled or renamed the administrator share names (C$, D$, etc.) on your target machines, then you must enable this check box in order for Ivanti Patch for Windows® Servers to access those machines.

 


Was this article useful?    

The topic was:

Inaccurate

Incomplete

Not what I expected

Other