Those patches come through Windows Update, so they should get applied automatically to any Windows machine that qualifies. You shouldn’t need a special policy that differs from your normal Windows policy. Does that give you what you need? Or are you wanting to do something different specifically with your MS SQL servers?

We haven’t created a policy like that yet, but I have a feeling we will soon. Some DBAs are hesitant to take SQL Server patches right away.

I would create a “Patch Only” policy and filter the list for anything with the words “SQL Server”. From there, select the patches you want to allow to be deployed.

image992×474 38.8 KB

Thanks @Chris - I’m guessing @rwagner’s situation is probably similar to yours, so that’s very helpful!

Thank you very much for your responses! They have been very helpful