A patch assessment template is basically a list of patches grouped together, for example, all patches for Windows Server 2008, all security patches for a specific month, or only security updates for all Windows operating systems. We can create either a static template or a dynamic template. In a static template, we choose patches manually, while in a dynamic template, we define criteria based on the patch release date, severity of the patch, product, and so on.
Before starting this recipe, we need a fully functional VCM setup and to follow the steps mentioned in Configuring VCM to use Microsoft updates.
You are tasked with implementing your organization's patch policy for Windows servers, and your security team will test and provide you with a list of approved patches on a monthly basis. You need to create a patch template and make sure all your servers are patched according to approved patches.
To start with, you need to create...