Deploy patches to equipments - Is it possible to patch computers directly by Lansweeper?

[Nick44]

Hi,

I'm a newbie in this forum and with Lansweeper. I try the solution since yesterday.
I try to find a MSP SaaS product that inventory equipements that have an IP and patch it if vulnerabilities are find.
Is it possible to patch computers directly by LanSweeper ?
Is LanSweeper the good product for me ?

Regards,

Nicolas

[duster1]

You can do so with the on-prem Lansweeper deployment packages.

I have not used it in a while, but this is what you have to do.

1. Download the .msu file from Microsoft for the required patch
2. Create a deployment. I can't upload the .xml that I exported, so I show the code for my deployment that we used.

<?xml version="1.0" encoding="utf-8"?>
<Package>
  <Name>Win 10 Install KB4474419</Name>
  <Description>Install Microsoft kb4474419 for Windows 10 machines</Description>
  <ShutdownOption>0</ShutdownOption>
  <ShutdownTime>0</ShutdownTime>
  <MaxDuration>7200</MaxDuration>
  <Rescan>True</Rescan>
  <RunMode>-1</RunMode>
  <Steps>
    <Step>
      <Nr>1</Nr>
      <Name>Verify Windows 10</Name>
      <Type>5</Type>
      <ReturnCodes></ReturnCodes>
      <Success>-1</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command></Command>
      <EditMode>False</EditMode>
      <Conditions>
        <Condition>
          <Type>4</Type>
          <SpecOne></SpecOne>
          <SpecTwo></SpecTwo>
          <Operator></Operator>
          <Value>Win 10</Value>
        </Condition>
      </Conditions>
    </Step>
    <Step>
      <Nr>2</Nr>
      <Name>Check 32bit System</Name>
      <Type>5</Type>
      <ReturnCodes></ReturnCodes>
      <Success>3</Success>
      <Failure>5</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command></Command>
      <EditMode>False</EditMode>
      <Conditions>
        <Condition>
          <Type>3</Type>
          <SpecOne></SpecOne>
          <SpecTwo></SpecTwo>
          <Operator>5</Operator>
          <Value></Value>
        </Condition>
      </Conditions>
    </Step>
    <Step>
      <Nr>3</Nr>
      <Name>Verify 32bit file exists</Name>
      <Type>5</Type>
      <ReturnCodes></ReturnCodes>
      <Success>4</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command></Command>
      <EditMode>False</EditMode>
      <Conditions>
        <Condition>
          <Type>1</Type>
          <SpecOne>{packageshare}\installers\MicrosoftUpdates\KB4474419</SpecOne>
          <SpecTwo>windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu</SpecTwo>
          <Operator>1</Operator>
          <Value></Value>
        </Condition>
      </Conditions>
    </Step>
    <Step>
      <Nr>4</Nr>
      <Name>Install 32bit KB4012606</Name>
      <Type>2</Type>
      <ReturnCodes>0,1641,3010</ReturnCodes>
      <Success>-2</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command>wusa.exe "{PackageShare}\Installers\MicrosoftUpdates\KB4474419\windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu" \quite</Command>
      <EditMode>False</EditMode>
      <Conditions />
    </Step>
    <Step>
      <Nr>5</Nr>
      <Name>Check 64bit System</Name>
      <Type>5</Type>
      <ReturnCodes></ReturnCodes>
      <Success>6</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command></Command>
      <EditMode>False</EditMode>
      <Conditions>
        <Condition>
          <Type>3</Type>
          <SpecOne></SpecOne>
          <SpecTwo></SpecTwo>
          <Operator>6</Operator>
          <Value></Value>
        </Condition>
      </Conditions>
    </Step>
    <Step>
      <Nr>6</Nr>
      <Name>Check 64bit file exists</Name>
      <Type>5</Type>
      <ReturnCodes></ReturnCodes>
      <Success>7</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command></Command>
      <EditMode>False</EditMode>
      <Conditions>
        <Condition>
          <Type>1</Type>
          <SpecOne>{packageshare}\installers\MicrosoftUpdates\KB4474419\64bit\</SpecOne>
          <SpecTwo>windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu</SpecTwo>
          <Operator>1</Operator>
          <Value></Value>
        </Condition>
      </Conditions>
    </Step>
    <Step>
      <Nr>7</Nr>
      <Name>Install 64bit KB4012606</Name>
      <Type>2</Type>
      <ReturnCodes>0,1641,3010</ReturnCodes>
      <Success>-2</Success>
      <Failure>-3</Failure>
      <Path></Path>
      <Parameters></Parameters>
      <MSIParameters></MSIParameters>
      <MSIName></MSIName>
      <MSIVersion></MSIVersion>
      <Command>wusa.exe "{PackageShare}\Installers\MicrosoftUpdates\KB4012606\64bit\windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu" \quite</Command>
      <EditMode>False</EditMode>
      <Conditions />
    </Step>
  </Steps>
  <SoftwareVersion>10.4.4.4</SoftwareVersion>
</Package>

Hope this helps answer your question.

I highly recommend testing it on a test system. Update the file verification checks, and install commands to match your needs. I've not used this deployment in over a year.

[Nick44]

I would have preferred it to be in the SaaS version... Thank you.

[duster1]

You asked if you could do it with Lansweeper. I simply provided you with a solution using Lansweeper for deploying windows patches.

You can create reports, or use the monthly lansweeper patch tuesday reports to determine what needs patched.

There is all kinds of things you can do with Lansweeper, however you'll have to take the time to set up your reports and automated deployments.

[Obi_1_Cinobi]

Hello there!

Lansweeper on-prem does have a deployment module that allows you to deploy changes on Windows computers. You can create deployment packages, series of conditions, and commands to remotely make changes to the Windows computers in your network: https://community.lansweeper.com/t5/deploying-software-other-changes/tkb-p/kb_deploying-software-and...

Lansweeper cloud currently does not have a deployment feature, but this might be possible through an integration in the future. For a list of the current integrations, you can refer to this page: https://www.lansweeper.com/integrations/

[Nick44]

I would have preferred it to be in the SaaS version... Thank you.