3.13 Configuring Patch Policy Pre-Install Behavior

In Patch Policy Pre-Install Behavior you define when patches are distributed to the agents and how end users are notified of the patch installations.

  • Schedule Distribution: When configuring Schedule Distribution, you can leave the default setting, which distributes patches according to the configuration in Patch Policy Settings, or you can define a schedule for patch distribution.

  • Pre-Install Notification Options: When configuring Pre-Install Notification Options, you can leave the system defaults in place, or you can override the system settings and define how end point users are prompted and interact with patch installations.

3.13.1 Schedule Distribution

The Schedule Distribution page allows you to define whether users receive notification when patches are downloaded and installed, and to customize the installation settings.

  • Default (Distribution and enforcement will apply on enforcement schedule): Use this option to stay with the Schedule Enforcement settings defined in Patch Policy Settings.

  • On Device Shutdown: Use this option to deploy patches on device during shutdown or reboot.

  • Schedule patch policy application time: Select this option to override the default options and choose new ones. This option enables setting a schedule that can limit the duration time of patch installation based on a specific date or a recurring schedule.

    • Restrict Duration: If you check the Restrict Duration check box, you can limit how long patches are applied by entering a time increment based on the number of hours, minutes, or a combination of both.

    • Date Specific: If you choose the Date Specific schedule type, you can schedule patch deployment using the following criteria:

      • Start Date(s): Enables you to pick the date when you need to start the deployment.

      • Run event every year: Ensures that the deployment starts on a selected date at selected time and repeats every year. If defined, ends on a specific date.

      • Process immediately if device unable to execute on schedule: Ensures that the deployment starts immediately if the device was unable to execute on the selected schedule.

      • Select When Schedule Execution Should Start: There are two options to enable you to select the start time of the schedule execution, namely:

        • Start Immediately at Start Time: Deactivates the End Time panel and starts the deployment at the start time specified. In this option, you must set the start time in the Start Time panel.

        • Start at a random time between Start Time and End Times: Activates the End Time panel next to the Start Time panel. You can specify the end time and the start time so that the deployment occurs at any random time between them.

          NOTE:Selecting the Use Coordinated Universal Time check box enables you to schedule the deployment of all devices at the same time, regardless of time zone differences. Coordinated Universal Time (UTC), also known as World Time, Z Time, or Zulu Time, is a standardized measurement of time that is not dependent upon the local time zone. Deselecting UTC schedules the distribution at local time.

    • Recurring: If you choose the Recurring schedule type, you can schedule patch deployment using the following criteria:

      • When a device is refreshed: Enables you to schedule a recurring deployment whenever the device is refreshed. In this option, you can choose to delay the next deployment until after a specific time.

        To set the delay, select the Delay execution after refresh check box, and specify the days, hours, and minutes of the time by which you require delaying the deployment.

        By default, the patch bundle install frequency is set to Install once per device. For a recurring deployment, change it to Install always, after completing the patch policy. For more information, see Install Action Set Options in the ZENworks Software Distribution Reference.

        NOTE:The device is refreshed based on the settings in Configuration > Device Management menu > Device Refresh and Removal Schedule (Manual Refresh or Timed Refresh). Alternatively, you can refresh the device by selecting a device in the Devices page and clicking the Refresh Device option in the Quick Tasks menu.

      • Days of the week: Enables you to schedule the deployment on selected days of the week. To set the day of deployment, select Days of the week, select the day of the week, and set the start time for the deployment.

      • Monthly: You can schedule the deployment on a specific day of the month, the last day of the month, or a specific day every week or month.

      • Fixed Interval: Enables you to schedule a recurring deployment that runs on a regular basis. You can choose the number of months, weeks, days, hours, and minutes of the interval and the start date for the deployment schedule.

To save any changes made in Patch Policy Pre-Install Behavior options, click Apply.

3.13.2 Pre-Install Notification Options

The Pre Install Notification Options page allows you to define whether users receive notification when patches are downloaded and installed, and to customize the installation settings.

  • Use values assigned to system variables or defaults: Select this option to use the default pre-install notification options defined within the Pre-Install Notification settings.

  • Override Settings: Select this option to override the default options and choose new ones. Selecting this option makes the remaining options available.

    • Notify Users of Patch Install: Select this option to notify the user prior to the installation of the patch.

    • Description text: The text of the notification message. You can edit this field only if you override the default settings.

    • Options: When you define installation options, you can specify whether to use the values in the default settings (the Use values assigned to system variables or defaults check box) or the custom settings. There are three options:

      • Allow User to cancel: Allows the user to cancel the patch installation.

      • Allow User to snooze: Allows the user to delay the installation.

        • Snooze interval: The duration the install is delayed when the user snoozes.

        • Install within: The deadline that the user can no longer snooze the installation.

          NOTE:Even if you snooze the installation, the popup window will continue to appear every few seconds until you proceed with or cancel the installation.

      • Show tray notification: On selecting this option, a notification for a pending installation is displayed in the system tray. If you select this option, define the following:

        • Tray notification duration: Enter a value in hours, minutes or seconds for how long the system tray notification is displayed before being hidden.

        • Tray notification text: Type the text you want to appear in the notification.

To save any changes made in Patch Policy Pre-Install Behavior options, click Apply.

3.13.3 Configure Patch Policy Pre-Install Behavior at the Folder Level

Patch Policy Pre-Install Behavior can also be set at the folder level, which enables you schedule patch distribution and set pre-install notification options for the Server or Workstation estate. By configuring Patch Management settings at the folder lever you will override the System settings (configured in the Configuration page), however, you can return to the System settings at any time by using the Revert option.

To configure the Patch Policy Pre-Install Behavior at the folder level:

  1. Click Devices in the ZENworks navigation menu.

  2. Click the Details link on the folder you would like to configure settings for.

  3. Go to Settings > Security > Patch Policy Pre-Install Behavior.

  4. At the top of the page there is an option to Override the system settings, select this to begin making changes.

    NOTE:This option can be used to revert back to System settings if you need to change back.

  5. Configure Schedule Distribution and Pre-Install Notification Options sections for the folder.