Patching and maintenance windows

Policies say what and when; windows say when it is allowed to happen.

Patch policies

RMM, Settings, Policies. A patch policy chooses Windows updates, drivers and third-party software; approval level (security and critical only, or everything); scan, install and reboot schedules; reboot behaviour (automatic, prompt with snooze, or never). Attach it to an organization, a group, a ring or a device. Policies in report mode only scan; enforce installs.

Exclusions

RMM, Exclusions. Keep a patch or an application off a device, a group or everything, with a note.

Maintenance windows

RMM, Settings, Maintenance. A window has days, a start and end time in a time zone (overnight windows are fine), and a scope: all machines, an organization, a group, a tag or one machine. Two switches:

• Keep alerts quiet while the window is open.
• Only patch and reboot inside the window: installs and reboots for covered machines wait for the window even when their schedule says now.

The machines table shows a wrench for anything inside a window, with the window's name on hover.

Rings and agent updates

Devices belong to a ring (0 is test). Nyxie publishes agent updates ring by ring and freezes a release automatically when enough machines report it failed.

Questions: hello@nyxie.io. Nyxie. All glows well!