Every month, Microsoft and software vendors publish fixes for security flaws that attackers already know about. Patching closes those doors. ECSG approves, schedules, installs and verifies updates on every managed computer and server — so your team stays protected without "restart now" interruptions.
When a vendor publishes a security fix, it also tells the world that the flaw exists. Attackers use that information to target the computers that haven't updated yet. In most small businesses, that's more devices than anyone realizes.
Users postpone restarts for days or weeks. The update is downloaded, but the computer is still unprotected.
Pending restartsAn update can fail on one device and nobody notices. That computer falls further behind every month.
Silent failuresBrowsers, PDF readers and meeting apps are favorite targets — and Windows Update doesn't patch them.
Third-party softwareInstead of leaving each computer to decide when to update, ECSG manages the whole cycle from one console with Datto RMM policies.
Microsoft and software vendors publish new updates and security fixes.
Patch Tuesday · Vendor releasesPolicies decide what installs: security fixes are approved; major upgrades wait until tested.
Patch Management policyInstalls run in a maintenance window outside working hours, with restarts planned.
Maintenance windowsUpdates install on every device. Native Windows Update is controlled so nothing installs unexpectedly.
Windows Update policyEach device reports its status. Failures become tickets, and results go into your monthly report.
Patch status · ReportingResult: every device is updated — and you can prove it.
A patch policy is a set of rules in Datto RMM that decides when updates install, which ones are approved, how restarts are handled and whether to install or only report. It works the same way for computers and servers — each group simply gets its own policy, adjusted to how it's used.
Updates run in a recurring maintenance window — a set day, start time and duration — chosen so installs don't compete with your team's work. Devices can even be woken up for the window.
Rules approve what protects you and hold back what could disrupt you. Security and critical updates are approved after a short waiting period, so problems reported elsewhere surface first.
Most updates only take effect after a restart. The policy can restart automatically, shut down or leave the decision to the user — with reminders and a limited number of postponements.
In schedule mode the policy installs approved updates. In audit only mode it reports what's missing without installing anything — useful for critical servers, where updates are reviewed first.
Settings shown are examples of what a policy controls. ECSG adjusts each policy to your business and reviews it over time.
An update that's installed but waiting for a restart is like a lock that's been delivered but not yet installed on the door. Until the computer restarts, the protection isn't active.
Important security updates were installed. Save your work and restart to finish protecting this computer.
Illustrative example of a restart reminder.
Many security fixes replace files that are in use. They only take effect when Windows starts again.
Every day without a restart is a day the computer stays exposed to a flaw that's already public.
Computers that go weeks without restarting get slower, fail new updates and show strange errors.
Save your work, restart, and you're done. Postponing is there for an important meeting — not for weeks.
Attackers don't care which vendor made the vulnerable software. Our patching covers the operating system and the applications around it.
Security and critical updates for Windows computers are approved and installed every cycle.
Cumulative updates keep Windows stable and fix problems that cause crashes and slowdowns.
Big version upgrades are held, tested and rolled out as a planned project — not overnight without warning.
Common business applications are kept up to date through Datto RMM software management.
Servers are patched with the same policy model as computers, in a separate policy with its own schedule and restart plan — or in audit-only mode until updates are reviewed.
When a critical, actively exploited flaw is announced, ECSG can push the fix outside the normal cycle.
Datto RMM shows the patch status of each managed device. Here's what each one means, and what ECSG does about it.
All approved updates are installed. Nothing to do — the goal for every device.
Updates are approved and waiting for the next install window. They'll install on schedule.
Updates are installed but need a restart to take effect. We schedule the restart or ask the user.
An update failed on this device. ECSG investigates the cause, fixes it and reinstalls.
Automatic updates install whenever Windows decides, can restart computers at bad times, don't cover third-party applications and don't tell anyone when they fail. Managed patching gives you control, coverage and proof.
Updates install in a scheduled maintenance window, and devices can be woken up for it. When a restart is needed, users get reminders and can postpone a limited number of times — enough to finish a meeting, not enough to leave the computer unprotected.
Yes. Servers use the same kind of policy, kept separate from computers so their schedule, approvals and restarts can be handled with extra care. A server policy can also run in audit-only mode, reporting missing updates for review before anything installs.
Major upgrades are held and tested first. If a specific update causes an issue, ECSG can pause it for your devices, remove it where needed and resume once a fix is available.
Yes. Common third-party business applications are kept current through Datto RMM software management, alongside Windows updates.
Insurers increasingly ask how quickly you apply security updates. Documented patch policies and monthly status reports help you answer those questions with evidence.
We'll check the update status of your devices and applications, then explain in plain language which gaps matter most and how we'd close them. No obligation.
Secure. Reliable. Human.
Request My Patch Review