Ivanti EPM – patch applicability detection

Projekt bez tytułu(35)

Ivanti EPM can scan client machines and install missing patches. As a rule patches are dedicated to a subset of operating systems (Affected Platforms) and product versions (Affected Products).


If some machines must be excluded from patching, a Query Filter can help[1]. Some patches are applied based on registry or file condition:



Custom Script is the most flexible solution for complex set of conditions. It is used to detect patch applicability by many vendors. A Visual Basic (VBS) script should return one of predefined values[2] (Detected, Reason, Expected, Found).



Many patching tools hide “detection logic”, make troubleshooting more difficult. EPM Admin can analyse detection script if patch does not work as expected.

Leave a Reply

Your email address will not be published. Required fields are marked *