Install Windows and third-party app updates in LogMeIn Resolve

You can install updates for your operating system and available third-party applications on a single or multiple devices. These updates are commonly known as patch management.

Remember: Windows updates are available for users with Premium licenses only. Updates can be deployed on verified devices only.

Install Windows updates on your devices

Important: To use this feature, the user must be authenticated with zero trust authentication, which serves the security of the session. Authentication is required only once when you run a Remote Execution step.

In the Console, go to the Devices page and select the devices that you want to update.
The Manage device panel opens on the right.
Under Device health, select OS updates and then choose the Select updates to install option.
To pre-select all updates for installation, choose Install all available now.
Select the Windows updates that you want to install.

Tip: To list only security-related Windows patches, select Add filters above the list of updates. From the filters, select Only security updates and select Apply filters in the bottom right.
Select Install selected updates on the right.
Select the devices where you want to install the updates, then select Next.
You can select online and offline devices as well.
Optional: Select Schedule this update to set a future time and date for the updates to be installed on the remote device.
You can schedule updates up to one year ahead.
Remember: If you have selected at least one offline device, you must schedule the installation of Windows patches.
Optional: Toggle Force reboot after installation to automatically reboot the device after installation. This option is available only when there is at least one update that requires a reboot.
Name your update on the right.
LogMeIn Resolve will refer to installed updates by this name.
Select Install now.
Alternatively, if you set a future time for your updates, select Schedule.
Enter your zero trust signature key to proceed with the installation.
A pop-up confirmation is displayed.

What to do next: To see the progress of the installation, on the History page, select See details next to your newly created device update package.

Note: LogMeIn Resolve uses Remote Execution to install Windows updates.

Update third-party apps on a single device

LogMeIn Resolve uses Windows Package Manager (winget) to update third-party applications on remote devices. Since winget is available on Windows (from Windows 10 version 1709), LogMeIn Resolve can update Windows devices only. Supported third-party apps are listed at https://winget.run/.

In the Console, go to the Devices page and search for the device that you want to update.
Click the link in the Application updates column.
The Software updates page is displayed.
On the Application updates tab, select the third-party apps that you want to update.
Only those apps are listed that are supported by Windows Package Manager (winget).
Name your update on the right.
LogMeIn Resolve will refer to installed updates by this name.
Optional: Select Schedule this update to set a future time and date for the updates to be installed on the remote device.
You can schedule updates up to one year ahead.
Remember: If you have selected at least one offline device, you must schedule the installation of Windows patches.
Select Install now on the right.
Alternatively, if you set a future time for your updates, select Install when scheduled.

What to do next: Click See details in the pop-up message to see the progress of the installation.

Can't update a third-party app? That's most likely because the vendor of the app does not support winget, which is the Microsoft package manager that LogMeIn Resolve uses to update applications.

Update third-party apps on multiple devices

In the Console, go to the Devices page and select the devices that you want to update.

Note: You can select offline devices, but third-party apps will not be updated on those devices.
On the Manage devices pane on the right, select Application updates under Device health.
On the Application updates page, make sure all the third-party apps that you want to update are selected.
Only those apps are listed that are supported by Windows Package Manager (winget).
Name your update on the right.
LogMeIn Resolve will refer to installed updates by this name.
Optional: Select Schedule this update to set a future time and date for the updates to be installed on the remote device.
You can schedule updates up to one year ahead.
Remember: If you have selected at least one offline device, you must schedule the installation of Windows patches.
Select Install now.

Automate the installation of Windows updates

You can schedule the installation of Windows patches and define what exactly to install so that LogMeIn Resolve periodically updates your devices' health.

In the Policies menu, select Add new policy in the top right.
On the Choose policy type page, select Windows updates, then select Next.
On the Configure policy page, set up how you want to automate the installation of Windows patches:
Under Recurrence, choose how frequently you want to repeat the installation:
- Repeat daily: the installation will run every day at the same time. For example, you can schedule the policy to run every day at 4 AM local time of the device.
- Repeat weekly: the policy will run at the same time every week. For example, you can schedule to run the policy at 4 AM on Mondays and Fridays.
  Remember: You can select multiple days of the week.
- Repeat monthly: the policy will run at the same time on a given day of the month that you select. For example, you can schedule a job to run at 4 AM on the second Monday of every month.
  Remember: You can select only one day of the month.
Note:
- Policies run in the timezone of the selected remote device; therefore, in your local time, the same job may run at different times on different devices.
- When you set recurrence, your policy will run at least twice.
Optional: Toggle Retry update settings and set a Time window to retry installing the updates on devices that are unavailable when the policy runs. If a device is unavailable during an update, the policy will keep trying to update within the set time window. If the update fails, the device will be marked "non-compliant" on the Policies page.
The time window can be set between 1 and 24 hours.
Under Manage automation, select update types that you want to automatically install.
- Install all Windows update patches - Applies all Windows patches to the selected devices
- Install by mandatory or severity - Windows updates will be installed based on Microsoft's labeling. You have the following options:
  - Based on mandatory status, updates can be Mandatory or Optional
  - Based on severity, updates can be Critical, , Important, Moderate, Low, or Unspecified
- Install by classification - Choose Microsoft-defined update categories. Only Windows patches in these categories will be installed on the selected devices.
Select Next.
Select the devices where you want to automate Windows update installation.
When you have several devices, you can select Add filter above the device list to display only a subset of computers.
Select Next.
On the Review and activate page, name your new policy and select Activate policy.
Type your signature key to finish.

Frequently Asked Questions

Are there any special system requirements for installing third-party app updates?

Yes. Since application updates uses Microsoft Package Manager (winget) to update third-party apps, you must make sure that winget is installed system-wide on your devices, that is for all users on that device. Winget is available with Windows 10 (from version 1709) and Windows 11 only. Also make sure that Windows is activated on your devices.

Which third-party apps does LogMeIn Resolve support?

Supported third-party apps are listed at https://winget.run/.

Can I manually set the time when a device should reboot after installing a Windows update?

No. When an update requires a reboot, the device restarts immediately after the update is installed. You have the following options to avoid an immediate restart:

You can let remote users postpone the reboot up to three times.
You can schedule the update to take place outside business hours.

Why can't I install patches to certain third-party apps?

The vendor of an application can create multiple installer types. Not all these installers are published to winget, which is the Microsoft package manager that LogMeIn Resolve uses to update applications. If the installer of a third-party app is not published to winget, you won’t be able to update that application.

Can I ignore patches that I don't want to install?

No. This feature is not yet available.

Where can I view the status of the Windows update installation process?

To view the status of all past Windows updates, go to the Devices > Updates page and select the History tab. This tab displays the status of all previous updates. For more information, see View past Windows updates in LogMeIn Resolve.

How can I see partially failed Windows updates?

On the History tab of the Devices > Updates page, you may see an update marked as Failed. If you see a number underneath, such as " 1/2 OS update completed", it indicates that one out of two Windows updates failed to install. To see which updates failed, hover over the update and select See details on the right.

Article last updated: 11 February, 2025

GoTo Connect

GoTo Meeting

GoTo Webinar

GoTo Room

GoTo Training

OpenVoice

Grasshopper

join.me

LogMeIn Resolve

LogMeIn Resolve MDM

LogMeIn Pro

LogMeIn Central

LogMeIn Rescue

GoToMyPC

GoToAssist

Hamachi

RemotelyAnywhere