Patch My PC Ideas & Feedback
A community where customers and the community can provide feedback to make a better product for everyone! For more details on how we prioritize requests, please see:
A community where customers and the community can provide feedback to make a better product for everyone! For more details on how we prioritize requests, please see:
This is somewhat related to PATCHMYPC-I-7090 & PATCHMYPC-I-7121, but my goal is specifically to address client-side performance impacts in large environments using Patch My PC.
In our environment, the deployed PMPC catalog is very large. As a result, a check-in may evaluate hundreds of detection scripts. On recently provisioned devices this becomes especially noticeable because detection logic for both application installs and updates must be processed.
We regularly see scenarios where:
500+ detection scripts are evaluated during a check-in
New devices take significantly longer to reach their desired application state
Application installations that would normally complete in approximately 15 minutes can take well over an hour while detection logic is being processed
The impact is visible in both IME and Patch My PC logs
Nothing is neccessary broken in the existing flow. It's using Intune as it should be. However, this would be an improvement.
Patch My PC could automatically create and maintain Entra ID groups for applications using a standardized naming convention, such as:
PMPC-AppCatalog-<AppName>
The proposed flow:
Automatically create and manage an Entra ID group for each published application.
Dynamically populate the group based on devices where the application is installed.
Allow these groups to be targeted for Update-Only deployments.
No changes required for existing Required or Available assignment workflows.
This could be an added benefit of the PMPC Client as it's already providing fast inventory information and reduce the reliance on numerous graph API calls for things like detecting the install for computers to be populated in the group.
Reduces the number of update detection scripts evaluated on devices that do not have a given application installed.
This is especially helpful in orgs like ours where any exceptions for PWSH are strictly a hard no.
Improves IME processing performance, particularly on newly provisioned devices.
Accelerates time to application installation and compliance.
Provides a more scalable approach for organizations managing large PMPC catalogs.
Improved reporting within Intune reducing the numbers of apps assigned to a device
Right now it shows all updates we deploy to all devices.
In large environments, the bottleneck is often not the installation itself but the volume of detection logic being executed - which appears to processed serially. Leveraging app-specific Entra ID groups for Update-Only deployments could significantly reduce unnecessary evaluation overhead while maintaining the existing deployment experience.
