Discovery & Autopatch

With discovery and autopatch, you can rapidly detect which apps are unmanaged and start manually or automatically patch them.


This guide has three parts:

  1. Manually patch applications

  2. Configure autopatch

  3. Monitor autopatch

1. Applications | Manually patch

Unmanaged: List of applications that are found on your Intune Endpoints, but are not yet managed by Scappman and are available in our App store.

Managed: List of applications that are found and already being managed by Scappman.

Manually patch

In the unmanaged application page you have the option to manually patch applications.

By clicking on “Patch”.

You will be directed to the install & update page of the app.

In order to only patch existing apps in your environment you must assign it as an update only app.

If you want to deploy the app to other devices in your environment, you can use the Install & Update option. This also automatically creates an update only app.

2. Autopatch | Automatically patch

The second option in the discovery tab, 'Autopatch', lets you automatically patch all your applications without manually creating an assignment for each application.

Autopatch can automatically create update only applications for discovered unmanaged applications.

Step 1: General

When you choose “On” you will be directed to the configuration flow for Autopatch.

Some options are available for configuration:

Primary language & Secundary language:

During auto-patching, we will use a primary language whenever it is available. If the primary language is not available, we will use the secondary language instead.

Minimum number of Installs:

The treshold number of the found unmanaged applications before we start autopatching.

I advise you to start with a higher number than 4 for medium sized businesses.

If you have a large environment, please put this number even higher.

Days to notify before creating autopatch apps :

You will get an email before we start auto patching the applications that we detect.

Enable update rings:

You have the ability to update in rings.

Step 2: Choose assignments

With update rings you have the ability to choose specific deployment groups.

If you don’t assign update rings you will have the option to choose between all users or all devices.

Step 3: Review and exclude apps

You have the option to exclude applications. Excluded applications will not be patched. There will be no creation of an “update only app” for those applications.

3. Monitor Autopatch

While autopatch is running you get three information tabs.

  • Excluded apps: Apps that are excluded from the autopatch service.

  • Failed apps: Apps that autopatch failed to update.

  • Upcoming apps: Applications that will start to get autopatched in the next day

Last updated