Skip to main content
The Windows Patch Management plugin enables centralized control over Windows Updates across managed assets. This plugin functions similarly to Windows Update for Business (WUfB) and aligns with Microsoft’s recommended practices—focusing on deferral, deadlines, and user experience rather than per-patch approval.

​
Add the plugin

  1. Navigate to Policies.
  2. Select the Windows tab.
  3. Click + Add and select Plugin.
  4. From the pop-up, select Windows Patch Management.
Image

​
How it works

This plugin configures Windows Automatic Updates via local policy, allowing devices to autonomously receive, install, and reboot for updates based on the settings defined in your Gorelo policy. Once applied, these settings override local user preferences and are enforced until the policy is removed or modified.

​
Update settings

From your Policy list, click the pencil icon to edit the Windows Patch Management plugin settings. This opens a pop-up with the following options.
Image

​
Deadline for OS updates

These settings define how long an asset has to install updates before enforcement kicks in. If enabled, the asset will first attempt to install updates during regular maintenance time. If it fails to do so within the deadline, it enters a grace period where the user is prompted to schedule a restart. Once the grace period expires, the update and restart will be forced.
When aligning these settings with CIS Controls, Essential Eight, NIST etc., the deferral period + deadline + grace period define the total number of days. For example, if you require critical updates to be installed within 7 days of release:
  • Quality update deferral period = 3 days
  • Deadline for quality updates = 2 days
  • Grace period = 2 days
  • 3 + 2 + 2 = 7 — you’re now at the maximum of 7 days.
⚠️ It is recommended to start with this as ‘Not configured’ when first onboarding with Gorelo as this is the least impactful option. When you choose to change this to ‘Allow’, start with each of the deadline and grace period values much higher and slowly reduce them to your preferred number.