HardenCoverage

Patch Dependency Order

Sorts a patch window so domain controllers, file servers and workstations restart in dependency order.

Part of Patch window coordination

Tools

ServiceNow Security Operations, Microsoft Intune, Jira Service Management

Outcomes

Dependency order written down • No double restart per host • Change record links every batch

Documentation

Instruction-ready detail below

When a patch window opens, pull <in:jira>the fleet list</in:jira> and <spreadsheets>write the restart order</spreadsheets> so domain controllers go first and workstations last, with an owner named per batch.

Instruction file

When a patch window opens, pull <in:jira>the fleet list</in:jira> and <spreadsheets>write the restart order</spreadsheets> so domain controllers go first and workstations last, with an owner named per batch.

Setup requirements

Tools

ServiceNow Security Operations, Microsoft Intune, Jira Service Management

Trigger

When a patch window is opened for a server fleet

Setup time

30 minutes

Other automations in this workflow

Emergency Patch Rollout

Pushes an out-of-band patch to internet-facing systems first and reports completion per host.

Mac Reboot Queue

Sorts the Macs waiting on a restart by site and business criticality, so one night clears the backlog.

Patch Compliance Report

Reports which devices are outside the patch window and by how many days, grouped by business unit.

Related workflows

Vulnerability SLA tracking

Assigns every open finding an owner and a deadline, and escalates only the ones about to breach.

Vulnerability reports

Builds the periodic report from the scanners themselves, so every open finding carries an owner, a deadline and a visible status.

Backup verification

Restores a real file and a real service on a schedule, so a green job status stops standing in for a proven recovery.

Download

Start with one instruction file.

Download the app and begin with drafts and checklists before you write anything back.

  • •Plain-language instructions
  • •Runs on your machine
  • •Works with your existing setup
  • •Reviewable activity history
Download