Approval Groups for Scoped Patch Management
ConnectWise introduces approval groups, a feature that combines patch approvals with device groups to create scoped patch policies that override partner-level settings. This capability addresses real-world scenarios like the January 2026 KB 5074109 issue, which caused unmountable boot volume errors on physical Windows devices but not virtual machines. Partners can now create multiple approval groups with hierarchical priority ordering, allowing granular control over which devices receive specific patches. The feature is available for both OS and third-party patching and enables MSPs to manage exceptions without disrupting their broader patch management strategy.
On-Demand Application Installation
The new on-demand application installation feature allows partners to deploy any supported third-party application to Windows endpoints without requiring Winget support on the target device. This addresses a long-standing partner request and eliminates the need for custom scripts or ASIO portal tasks. Partners can push applications immediately or schedule deployments, targeting individual devices or entire sites. The feature works across Windows 10, Windows 11, and even older operating systems or server installations, provided the application supports that OS. Deployment tracking is available through the Schedule tab with full history visibility.
Third-Party Patching Roadmap and Enhancements
ConnectWise outlined upcoming improvements to third-party patching, including device details visibility in early March and a manual update option in late March. The manual update feature will allow partners to target only devices where an application is outdated, rather than deploying to all endpoints. Additional roadmap items include catch-up functionality for devices that missed scheduled patches (expected Q2), custom application support with file hosting capabilities, and ring-based deployment options for pilot testing. The improved third-party patching platform is positioned as the go-to solution for Windows desktops, with legacy third-party patching remaining available for Mac devices.
