Windows Update Patch Policy

BRITECITY's patching framework applies default patching categories, schedules, and approval policies for all managed Windows workstations and servers. Our strategy prioritizes security while maintaining system stability through severity-based and classification-based deployment rules.

Workstation Patching Schedule

Workstations receive updates on a nightly basis with minimal impact to your work day:

Users can defer the installation notification up to four times, with a 24-hour wait between deferrals before automatic approval.

Server Patching Schedule

Servers follow a more controlled schedule to ensure business operations are not disrupted:

Update Types Deployed

All update types deploy to both workstations and servers to ensure comprehensive security:

• Security Updates: Critical patches for security vulnerabilities
• Critical Updates: Non-security critical fixes
• Feature Updates: New Windows features (workstations only)
• Update Rollups: Cumulative update packages
• Service Packs: Major update collections

Note: Drivers and certain enterprise applications (Exchange Server, SQL Server) follow different approval matrices and are handled separately to prevent compatibility issues.

Severity-Based Approach

Our patching policy is severity-based to ensure critical vulnerabilities are addressed promptly:

Feature and Quality Updates are deferred until released and vetted by the ConnectWise NOC to ensure stability.

Why We Patch Aggressively

Unpatched systems are the leading cause of security breaches. By maintaining aggressive patching schedules, we:

• Close security vulnerabilities before attackers can exploit them
• Ensure compliance with security frameworks and regulations
• Maintain system stability through regular updates
• Reduce technical debt from accumulated missed updates

Daytime Patching

If your computer is offline during scheduled patch windows, our Daytime Patching feature ensures updates are still applied. This means:

• Laptops that are closed or turned off at night still receive updates
• Updates may install during the workday if the scheduled window was missed
• Your system stays secure even with non-standard working hours

For more information, see our Daytime Patching Policy.

Best Practices for Users

To ensure smooth patching with minimal disruption:

1. Keep your computer powered on overnight (connected to AC power for laptops)
2. Save and close all work before leaving for the night
3. Do not disable Windows Update or patch management agents
4. Report any unusual behavior after updates to our support team