Patch My PC Ideas & Feedback
A community where customers and the community can provide feedback to make a better product for everyone! For more details on how we prioritize requests, please see:
A community where customers and the community can provide feedback to make a better product for everyone! For more details on how we prioritize requests, please see:
This is somewhat related to PATCHMYPC-I-7090 & PATCHMYPC-I-7121, but my goal is specifically to address client-side performance impacts in large environments using Patch My PC.
In our environment, the deployed PMPC catalog is very large. As a result, a check-in may evaluate hundreds of detection scripts. On recently provisioned devices this becomes especially noticeable because detection logic for both application installs and updates must be processed.
We regularly see scenarios where:
500+ detection scripts are evaluated during a check-in
New devices take significantly longer to reach their desired application state
Application installations that would normally complete in approximately 15 minutes can take well over an hour while detection logic is being processed
The impact is visible in both IME and Patch My PC logs
Nothing is neccessary broken in the existing flow. It's using Intune as it should be. However, this would be an improvement.
Patch My PC could automatically create and maintain Entra ID groups for applications using a standardized naming convention, such as:
PMPC-AppCatalog-<AppName>
The proposed flow:
Automatically create and manage an Entra ID group for each published application.
Dynamically populate the group based on devices where the application is installed.
Allow these groups to be targeted for Update-Only deployments.
No changes required for existing Required or Available assignment workflows.
This could be an added benefit of the PMPC Client as it's already providing fast inventory information and reduce the reliance on numerous graph API calls for things like detecting the install for computers to be populated in the group.
Reduces the number of update detection scripts evaluated on devices that do not have a given application installed.
This is especially helpful in orgs like ours where any exceptions for PWSH are strictly a hard no.
Improves IME processing performance, particularly on newly provisioned devices.
Accelerates time to application installation and compliance.
Provides a more scalable approach for organizations managing large PMPC catalogs.
Improved reporting within Intune reducing the numbers of apps assigned to a device
Right now it shows all updates we deploy to all devices.
In large environments, the bottleneck is often not the installation itself but the volume of detection logic being executed - which appears to processed serially. Leveraging app-specific Entra ID groups for Update-Only deployments could significantly reduce unnecessary evaluation overhead while maintaining the existing deployment experience.
Thank you - we've read and noted this Feature Request. We triage and stack rank based on customer demand (Vote counts), resourcing and other factors and will update the status if/when this Feature makes progress.
Before I was introduced to PMPC I had stumbled across a runbook that aimed to do essentially the above. I don't recall if it was a Powershell or Logic app or what...
But it was essentially pulling the Intune discovered software reports and then using that to dynamically update targeted security groups for each application being deployed.
Seemed like a super clever surgical approach as opposed to the PMPC "brute force hammer" kinda approach.
My only initial concern at the time was the scoping of the graph permissions I thought was rather broad and couldnt be narrowed down to only the desired security groups... But that was mainly a MS controlled GraphAPI limitation than the runbook itself.
Would love to see this introduced to PMPC.
Thank you - we've read and noted this Feature Request. We triage and stack rank based on customer demand (Vote counts), resourcing and other factors and will update the status if/when this Feature makes progress.