Patch Management System Requirements

This Article Applies to:

AVG Business Cloud Console

For more detailed requirements for all operating systems see System Requirements.

Windows Only:

11 — x64, x86
10, 8.x, 7 SP1 — requires KB3033929 — x64, x86
Server 2019, 2016, 2012 — any edition with latest Service Pack excluding Server Core — x64
Server 2008 R2 — requires KB3033929 — x64
Exchange Server 2016, 2013, 2010 SP2 — x64

Preparing your devices for Patch Management

Windows Update: we recommend you change Windows Update settings for your devices via the Windows Update Center and/or Group Policy. We have provided our recommended settings in Recommended Windows Update Configuration for Patch Management. The recommendations are the same for Avast and AVG consoles.

Software Updater: older versions of the Cloud Console and CloudCare provided a Software Updater component that performed some of the same functions as Patch Management. Ensure Software Updater is disabled/uninstalled for devices.

Local System account: patches are deployed under the remote machine's Local System account, so you need to ensure deployment will be allowed by that account.

Hard Drive space: a minimum of 2GB hard drive space should be free to store patches. If you are using a Master Agent/Local Update Agent, that device should have a minimum of 5GB hard drive space.

Servers vs Workstations: If you plan to use different Patch Management settings for your server devices and workstations, you should place your servers into a separate policy. If you only want to update the Windows Server operating system then you should exclude all 3rd party vendors from the Excludes list to make sure that only Windows updates are being provided.

Preparing Devices for Patching

For uninterrupted patching, check these items before setting up Patch Management on devices:

Ensure the user profile of the device’s group policy in Active Directory allows program installations and upgrades
Ensure the device’s hard drive has enough space for patches to be received and stored
Ensure that if the device’s policy is set up to download patches from a local update server, the server is in the same network
Ensure the device is online at the time of patching
Ensure the device’s Firewall settings allow patch installation