Patch Policy Reboot Behavior

Some patches require their host to be rebooted after installation. You can leave the default of no reboots or prompts and handle these actions another way, or you can choose to notify users when a reboot is required and also give them some flexibility for when the reboot takes place.

Refer to the reboot options described below to better understand how to configure them:

Default Disabled (no reboots or prompts): The default option is typically used when zone administrators have other processes in place that handle reboots on a routine basis.
Enabled: Select this option to allow reboots when patching and to enable the Notify Users check box.
Notify Users: Select the check box to enable reboot notification and its configuration options.
- Description text: Edit the text of the notification prompt when Notify Users is selected.
- Options: Define how the user is notified of and interacts with the reboot. There are three options:
  - Suppress reboot: Select Yes to enable an option in the reboot notification prompt to prevent the reboot.
  - Allow User to cancel: Select Yes to enable a cancel option in the reboot notification prompt.
  - Allow User to snooze: Select Yes to enable a snooze option in the patch policy reboot notification prompt, which delays the reboot.
    
    Snooze interval: The duration the reboot is delayed when the user clicks Snooze.
    
    Reboot within:The deadline when the user can no longer delay the reboot.
    
    Show tray notification: If you select this option, a notification for a pending reboot is displayed in the system tray. Notification options include the following:
    
    Tray notification duration: Enter a value in hours, minutes or seconds for how long the system tray notification is displayed before being hidden.
    
    Tray notification text: Edit the text you want to appear in the notification prompt.

IMPORTANT:If you delete an old patch policy from an endpoint and then publish a new policy to replace it, the endpoint may list a Device-Assigned Bundle Status of Not Installed for an indefinite period of time. If you encounter this endpoint status, reboot the endpoint to complete publication of the patch policy.