Windows Patching without WSUS (WSUS-Less) Solution Overview

JetPatch provides a straightforward method to manage Windows updates directly from Microsoft's public cloud repository, eliminating the need for WSUS infrastructure.

Patch Source

• Microsoft Cloud Repository: All updates are retrieved directly from Microsoft's public repository.
• Local repositories are not supported in WSUS-less setups; if a local repository is required, WSUS must be utilized.

How Does It Work?

Deploy the Connector

• JetPatch Connector (agent) is deployed on each Windows endpoint.
• The Connector maintains continuous communication and compliance visibility.

Collect Endpoint Updates

• JetPatch executes the built-in task "Collect Endpoint Updates" directly on endpoints.
• This task identifies installed and required updates, see article for more information.

Patch Installation

• Performed via the built-in "Execute Patch Installation" task during scheduled maintenance.

• Approved patch download and installation both happens during scheduled maintenance.  Pre-patch download on approval will be added in 4.3

Prerequisites

• Microsoft Update Service Installed: Automatically activated by JetPatch Connector deployment.
• Connectivity: Direct or proxy-based connection to Microsoft Update via ports 80 and 443.
• More information

This WSUS-less approach simplifies patch management infrastructure, reduces complexity, and enhances security and compliance through direct integration with Microsoft's cloud-based updates.