Patch and Update reports in Hexnode UEM

Hexnode UEM’s ‘Scan for updates‘ action allows IT administrators to scan Windows devices for available patches and updates. With the addition of Patch and Update Reports, IT administrators can now access comprehensive information about the updates that are available for their devices, or identify which devices are missing these updates.

Creating Patch and Update reports

Patch and Update reports are categorized as follows:

• Available updates
• Devices missing updates
• Devices pending reboot
• Fully patched devices
• Critical updates
• Major updates
• Minor updates
• Updates awaiting approval

To generate any Patch and Update report:

1. Log in to your Hexnode UEM portal.
2. Navigate to Reports > Built-in Reports > Patch and Update.
3. Select the update report you want to generate.

Available updates

The list of updates available for Windows devices that are enrolled in Hexnode UEM.

The report contains the following details:

1. Update Name: Name of the update.
2. Product: The OS or app for which the update is available.
3. Affected Devices: The number of devices where the update status is anything other than ‘Installed’. This includes devices with statuses such as ‘Installable’, ‘Failed’, ‘Approved’, or ‘Pending Reboot’. You can view the details of the devices, such as Device Name, User, OS, Version, Serial Number, and Update status, by clicking on the number corresponding to the respective update under the Affected Devices column.
4. Installed Devices: The number of devices where the update is in an Installed status. You can view the details of the devices, such as Device Name, User, OS, Version, and Serial Number, by clicking on the number corresponding to the respective update under the Installed Devices column.
5. Platform: The device platform to which the update is applicable.
6. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
7. KB Number: The Knowledge Base (KB) reference number associated with the update. These KB numbers are unique identifiers provided by vendors like Microsoft to document specific updates and fixes.

Devices missing updates

The list of all Windows devices along with the number of available updates that have not yet been installed on each device.

The report contains the following details:

1. Device Name: Name of the device.
2. Username: Name of the user.
3. Platform: The platform of the device.
4. Last Successful Scan: The date and time when the device were last successfully scanned for updates.
5. Missing Updates: The number of available updates that are not installed on the device. You can view the details of the missing update, such as Name, Product, and Details, by clicking on the number corresponding to the respective device under the Missing Updates column.

Critical updates

The list of all patches with severity “Critical”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Product: The software, application, or OS component that the patch or update applies to.
3. Affected Devices: All the devices that need to have a particular patch or update installed.
4. Installed Devices: The devices where the patch or update has already been successfully installed.
5. Platform: The device platform to which the update is applicable.
6. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
7. Approval Status: Whether the update has been approved for installation on the device. (Pending or Approved).

Major updates

The list of all patches with severity “Important”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Product: The software, application, or OS component that the patch or update applies to.
3. Affected Devices: All the devices that need to have a particular patch or update installed.
4. Installed Devices: The devices where the patch or update has already been successfully installed.
5. Platform: The device platform to which the update is applicable.
6. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
7. Approval Status: Whether the update has been approved for installation on the device. (Pending or Approved).

Minor updates

The list of all patches with severity “Moderate”.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Product: The software, application, or OS component that the patch or update applies to.
3. Affected Devices: All the devices that need to have a particular patch or update installed.
4. Installed Devices: The devices where the patch or update has already been successfully installed.
5. Platform: The device platform to which the update is applicable.
6. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.
7. Approval Status: Whether the update has been approved for installation on the device. (Pending or Approved).

Updates awaiting approval

The list of all patches that are not yet approved by the admin.

The report contains the following details:

1. Update Name: The name of the update or patch, such as the version and identifier of the update.
2. Product: The software, application, or OS component that the patch or update applies to.
3. Severity: The criticality of the update, categorized into levels such as Critical, Important, Moderate, or Low.
4. Affected Devices: All the devices that need to have a particular patch or update installed.
5. Installed Devices: The devices where the patch or update has already been successfully installed.
6. Platform: The device platform to which the update is applicable.
7. Update Classification: The type of update based on the platform. For Windows (Microsoft), classifications include Critical Updates, Definition Updates, Feature Packs, Security Updates, Service Packs, Tools, Update Rollups, Updates, and Upgrades. For macOS (Apple), classifications include Rapid Security Responses, Major Updates, Minor Updates, Firmware Updates, and Config Data Updates.

Devices pending reboot

The list of all devices with at least one update in the status “Pending Reboot”.

The report contains the following details:

1. Device Name: Name of the device.
2. Username: Name of the user.
3. Platform: The device platform to which the update is applicable.
4. Last Successful Scan: The date and time when the device were last successfully scanned for updates.
5. Updates Pending Reboot: The devices that are awaiting a reboot for the update to be fully applied.

Fully patched devices

The list of devices with all applicable updates installed.

The report contains the following details:

1. Device Name: Name of the device.
2. Platform: The device platform to which the update is applicable.
3. OS Version: The operating system version.
4. Device ID: The unique identifier assigned to the device upon its enrollment in Hexnode UEM.
5. Username: Name of the user.
6. Last Successful Scan: The date and time when the device were last successfully scanned for updates.

On the Device missing updates, Device pending reboot and Fully patched devices report pages, you can click on the listed device and initiate the Scan for Updates right from the report page.

You also have the option to schedule reports at desired time intervals and have them automatically emailed to specified recipients. Additionally, you can Export the report to your device in either PDF or CSV format.