For a little overview, I have a company with about 300 LANDesk clients deployed; only about 10 in my pilot group which are actually receiving Windows patches from LANDesk. All users at my company had local admin and were able to install any program they wanted. This has caused a huge headache to me with trying to find the best way to get all the different systems to a baseline of installed patches. I am wondering if using the Scan folder or if repairing a massive amount of patches will be best to get all of these computers to a baseline where I can start an organization wide monthly patch cycle.
At the moment, I have all new patches downloading into the unassigned folder. From there, I move the patches into either a Windows(OS) repair folder or a Application repair folder and run my repairs off of this group. As the testing of these patches succeeds, I enable autofix and place them in the Scan folder. This has been an easy task since I am repairing a group of people who either kept up with their updates prior to LANDesk (Windows and Application) or users who have very basic programs installed on their machines.
Any input or suggestions for getting my company as a whole to an updated baseline would be greatly appreciated. If there is any more information that would be useful to have, please let me know and I can provide anything.
I am running LANDesk Management Suite 9.0 SP3