Skip to content
Back to Optanik Tutorials

Guides

How to patch Windows, macOS and Linux with Optanik

Set patch schedules, maintenance windows and soak days per group, patch third-party apps, and track fleet compliance in Optanik Patch Management.

Optanik Patch Management keeps Windows, macOS and Linux up to date, along with common third-party applications, and shows how compliant the whole fleet is.

Read the Optanik patch compliance numbers

Device compliance is the share of computers with nothing left to install. Known patches compares updates installed against those still available. Each operating system has its own card with its own numbers. Scan all devices checks every computer for updates, and Install eligible now installs everything your policy allows, right away.

Patch Management · watch from 13:17 in the full Optanik tutorial

Set the Optanik patch schedule

Open a policy, such as the Windows policy, to set when updates install. A typical schedule is weekly on Saturday at 2:00 AM, only inside the maintenance window, after a three-day soak so brand new updates can settle first. The policy shows patches still waiting out their soak time and computers that need a reboot.

Turn on third-party application patching to update common apps too, and choose which apps to leave alone.

Give a group its own Optanik patch policy

Policies live in Group Policies, one area at a time. The operating system groups hold the default policies. A custom group, such as Servers or Headquarters, needs its own saved patch policy; nothing is inherited from a parent group, so until you save one, its computers follow the default for their operating system.

Group Policies · watch from 7:06 in the full Optanik tutorial

Patch one computer in Optanik

Every computer is listed under its policy as patched, pending or deferred, with buttons to scan it, patch it, or view its updates. A device's own Patches tab lists the updates for just that computer and can scan it on the spot.

Report on patching in Optanik

The Patch Compliance report shows which computers are fully patched and which are missing updates. Export it as PDF, CSV or Excel, scope it to a group, or email it on a schedule from Reports. Automations can also install critical patches and reboot when a computer falls behind.

More: How to automate fixes with Optanik automations and playbooks · How to build your Optanik Support public page and knowledge base · How to check fleet security and send reports with Optanik · How to connect scripts and AI to Optanik with the REST API, MCP and webhooks · How to deploy printers, mapped drives and settings with Optanik · How to deploy software with Optanik · How to install the Optanik agent on Windows, macOS and Linux · How to manage files on remote computers with Optanik · How to remote control a computer with Optanik · How to run meetings in OptaMeet: schedule, rooms, recording and OptAi transcripts · How to set up Optanik Domain, Optanik DNS and Domain Users · How to set up Optanik Support and work tickets · How to set up the Optanik Network, LAN Sharing and device isolation · How to use Optanik Keyring: vaults, records, import and browser extensions