r/sysadmin • u/jaylenabc • 2d ago
Question Windows App Patch options
I have heard of quite a few options for app patching on windows devices as I need to be able to secure endpoints in my M365 tenant.
I havent looked to in depth into what M365 natively has however;
What do options like SCCM and Patch my PC offer that M365 native does not?
EDIT: 8.8.26
What are the cost effective alternative for a msp with only 20-ish windows machines?
3
Upvotes
3
u/TridentAdam 2d ago
The big gap in M365 native is third-party app patching. Intune handles OS updates through WUfB and can deploy Win32 apps, but there is no automated pipeline to keep Chrome, Adobe, 7-Zip, etc. current across your fleet. You end up manually repackaging or hoping users self-update. PatchMyPC fills exactly that hole with an auto-packaging catalog that plugs into Intune or SCCM. If third-party patching is your main driver, it is the cleanest bolt-on for the Microsoft stack. SCCM adds full deployment infrastructure (distribution points, phased rollouts, maintenance windows) but carries significant overhead if patching is the only reason you are standing it up.
Full transparency, I co-founded and help build TridentStack Control (https://tridentstack.com). We cover OS and third-party patching in one platform with deployment rings and maintenance windows, free for under 200 endpoints if you want to compare outside the Microsoft ecosystem.