This site is for Avast Business products only. For articles on AVG Business products, see AVG Business Help. If you are in the right place but cannot find what you are looking for, please contact Avast Business Support for further assistance.

Patch Management System Requirements

This Article Applies to:

  • Avast Business Hub

Windows

  • 11 — x64
  • 10 (Pro, Education, and Enterprise editions) — x64, x86
  • 8/8.1 (all versions except RT and Starter Edition) — x64, x86
  • 7 SP1 (requires KB3033929) — x64, x86
  • Server 2022, 2019, 2016, 2012 (any edition with latest service pack excluding Server Core) — x64
  • Server 2008 R2 (requires KB3033929) — x64
  • Small Business Server 2011 — x64

For more detailed requirements for all operating systems, see System Requirements.

Preparing Devices for Patching

Windows Update: we recommend you change Windows Update settings for your devices via the Windows Update Center and/or Group Policy. We have provided our recommended settings in Recommended Windows Update Configuration for Patch Management. The recommendations are the same for Avast and AVG consoles.

Software Updater: older versions of the Cloud Console and CloudCare provided a Software Updater component that performed some of the same functions as Patch Management. Ensure Software Updater is disabled/uninstalled for devices.

Local System account: patches are deployed under the remote machine's Local System account, so you need to ensure deployment will be allowed by that account.

Hard Drive space: a minimum of 2GB hard drive space should be free to store patches. If you are using a Master Agent/Local Update Agent, that device should have a minimum of 5GB hard drive space.

Servers vs Workstations: If you plan to use different Patch Management settings for your server devices and workstations, you should place your servers into a separate policy. If you only want to update the Windows Server operating system then you should exclude all 3rd party vendors on the Excludes list to make sure that only Windows updates are being provided. See Deploying Missing Patches for more details.

For uninterrupted patching, check these items before setting up Patch Management on devices:

  • Ensure the user profile of the device’s group policy in Active Directory allows program installations and upgrades
  • Ensure the device’s hard drive has enough space for patches to be received and stored (at least 2GB)
  • Ensure that if the device’s policy is set up to download patches from a local update server, the server is in the same network
  • Ensure the device is online at the time of patching
  • Ensure the device’s Firewall settings allow patch installation