How to Remediate OS-Related Patches using WSUS Server via SanerNow

This guide provides a step-by-step process to remediate operating system-related patches using a WSUS (Windows Server Update Services) server via the SanerNow console. Follow the outlined procedure to ensure successful patch deployment.

Solution:

Before Patch Approval

1. Identify Missing Patches:
   • Determine the patches required by reviewing the missing patches list.
   • Note the specific KB number (e.g., KB5041016).

2. Verify Patch Availability:
   • On the WSUS server, search for the identified patch by its KB number.
   • Confirm its current approval status (Approved/Not Approved).

3. Attempt Remediation Without Approval:
   • For testing purposes, try remediating the patch without approval.
   • Observe the remediation status, which will indicate failure with the reason: "The required patch is not found in the software repository."

After Patch Approval

1. Approve the Patch on WSUS:
   • On the WSUS server, locate the specific KB by searching for it.
   • Right-click the patch and select the Approve option.

2. Select Target Devices:
   • Choose the relevant device computer group for the patch deployment.
   • Select Approved for Install and click OK.

3. Confirm Approval:
   • A confirmation popup will appear indicating the approval completion.
   • Click Close to finalize the process.

4. Retry Remediation in SanerNow:
   • Navigate to the SanerNow console and reattempt the remediation.
   • The remediation process should now complete successfully.

Additional Notes:

• Ensure the WSUS server is synchronized with Microsoft Update to reflect the latest patch catalogue.
• Monitor the patch deployment status in the SanerNow console for real-time updates.