Blast radius preview
Windows Server Patch Rollout
Preview target scope, exclusions, risk posture, and estimated work before dispatch.
Scope
Matched vs excluded
Maintenance mode and offline states are suppressed before run dispatch.
Matched2
Excluded6
Maintenance2
Why matched
Target explanation
Conditions used to build the preview cohort.
tag=Windows-Patch
os=windows
Offline and maintenance-mode devices are excluded from patch dispatch.
Top impact
Groups and tags affected
The first approval pass should focus here.
Finance / Servers421
Cobalt / POS338
Helio / VDI212
tag=Windows-Patch1284
tag=SERVER488
Device preview
Sample device decisions
Matched and excluded examples with precise reasons.
| Device | Organization | Status | Tags | Decision |
|---|---|---|---|---|
| fin-srv-payroll-03 | Northstar Finance | online | SERVER, VPN, Windows-Patch | Matched target |
| hr-ltp-onboarding-18 | Northstar Finance | offline | NEW-HIRE, Windows-Patch | Device is offline at dispatch |
| infra-db-replica-02 | Aster Health | online | SERVER, Linux, Maintenance-Window | Missing target condition: tag=Windows-Patch |
| ops-macbook-maya | Cobalt Retail | managed | macOS, VPN, Remote | Missing target condition: tag=Windows-Patch |
| retail-pos-441 | Cobalt Retail | online | POS, Windows-Patch, No-Reboot | Matched target |
| support-vdi-07 | Helio MSP | offline | VDI, Windows-Patch, Flaky | Device is offline at dispatch |
| prod-api-edge-01 | Aster Health | online | SERVER, API, High-Availability | Missing target condition: tag=Windows-Patch |
| legal-ltp-case-22 | Northstar Finance | managed | Windows-Patch, VPN, Sensitive | Device is in maintenance mode |