Software management
This page is the record of the software we keep up to date, remove and leave alone on the devices we manage. It is maintained in our own systems and published from them, so it shows what our policies hold today. The dates it was last reviewed and will next be reviewed are at the foot of the page.
How updates reach a device
We manage software through our remote monitoring and management platform (Datto RMM). Every managed device takes one of the policies described here.
Windows desktops and laptops
The platform's Advanced Software catalogue updates each product under "What we keep current" wherever it is already installed. It never installs a product that is not there. Each update reaches devices in one of three tiers: 1, 5 or 10 business days after the vendor releases it. Windows devices also take the standard list below. Advanced Software does not run on Windows devices with ARM processors, which we keep up to date on a reasonable-efforts basis.
Macs
A Mac takes the standard list only, and only the products marked macOS in it: Adobe Acrobat Reader DC, Adobe AIR, Citrix Workspace, Datto File Protection, Datto Secure Edge, Datto Workplace Classic, FileZilla Client, Google Chrome, Java Runtime Environment, Mozilla Firefox, Mozilla Thunderbird and Webroot SecureAnywhere. Microsoft Office on a Mac updates through Microsoft AutoUpdate, and Zoom updates itself, so neither is managed from the list on a Mac.
How common Mac applications are kept up to date: 76 products
| Software | How it is kept current |
|---|---|
| 1Password | 1Password is updated by our Mac application updater. |
| Adobe Acrobat | Adobe Acrobat is updated by our Mac application updater. |
| Adobe Acrobat Reader | Adobe Acrobat Reader is kept current by Datto RMM's standard software list, with our Mac application updater measuring it alongside. |
| Adobe AIR | Adobe AIR is kept current by Datto RMM's standard software list. |
| Adobe Creative Cloud | Adobe Creative Cloud is updated by our Mac application updater. |
| Adobe Illustrator | Adobe Illustrator updates itself through Adobe Creative Cloud. |
| Adobe InDesign | Adobe InDesign updates itself through Adobe Creative Cloud. |
| Adobe Photoshop | Adobe Photoshop updates itself through Adobe Creative Cloud. |
| Adobe Premiere Pro | Adobe Premiere Pro updates itself through Adobe Creative Cloud. |
| AEM Agent | AEM Agent is updated by Datto RMM: the platform updates its own agent. |
| AnyDesk | AnyDesk is updated by our Mac application updater. |
| Asana | Asana is updated by our Mac application updater. |
| Canva | Canva is updated by our Mac application updater. |
| CapCut | CapCut is updated by our Mac application updater. |
| ChatGPT | ChatGPT is updated by our Mac application updater. |
| Citrix Workspace | Citrix Workspace is kept current by Datto RMM's standard software list, with our Mac application updater measuring it alongside. |
| Claude | Claude is updated by our Mac application updater. |
| CleanMyMac | CleanMyMac updates itself through its own updater. |
| ClickUp | ClickUp is updated by our Mac application updater. |
| Copilot | Copilot is updated through the App Store by its user. |
| Cursor | Cursor is updated by our Mac application updater. |
| Datto EDR Agent | Datto EDR Agent is updated by Datto EDR: the platform updates its own agent. |
| Datto File Protection | Datto File Protection is kept current by Datto RMM's standard software list. |
| Datto RMM | Datto RMM updates its own agent. |
| Datto Secure Edge | Datto Secure Edge is kept current by Datto RMM's standard software list. |
| Datto Workplace Classic | Datto Workplace Classic is kept current by Datto RMM's standard software list. |
| Docker | Docker is updated by our Mac application updater. |
| Dropbox | Dropbox is updated by our Mac application updater. |
| Evernote | Evernote is updated by our Mac application updater. |
| FileZilla Client | FileZilla Client is kept current by Datto RMM's standard software list. |
| GarageBand | GarageBand is updated through the App Store by its user. |
| Google Chrome | Google Chrome is kept current by Datto RMM's standard software list, with our Mac application updater measuring it alongside. |
| GoToMeeting | GoToMeeting is updated by our Mac application updater. |
| Grammarly Desktop | Grammarly Desktop is updated by our Mac application updater. |
| iMovie | iMovie is updated through the App Store by its user. |
| Java Runtime Environment | Java Runtime Environment is kept current by Datto RMM's standard software list. |
| Keeper Password Manager | Keeper Password Manager is updated by our Mac application updater. |
| Keynote | Keynote is updated through the App Store by its user. |
| Kindle | Kindle is updated through the App Store by its user. |
| Logi Options | Logi Options is updated by our Mac application updater. |
| Logi Options+ | Logi Options+ is updated by our Mac application updater. |
| Malwarebytes | Malwarebytes is updated from the Malwarebytes console: its security console owns the version. |
| Microsoft AutoUpdate | Microsoft AutoUpdate updates itself through its own updater, and our Mac application updater measures it and catches it up when it falls behind. |
| Microsoft Defender | Microsoft Defender is updated from the Microsoft Defender portal: its security console owns the version. |
| Microsoft Edge | Microsoft Edge is updated by our Mac application updater. |
| Microsoft Excel | Microsoft Excel updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Microsoft OneNote | Microsoft OneNote updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Microsoft Outlook | Microsoft Outlook updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Microsoft PowerPoint | Microsoft PowerPoint updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Microsoft Teams | Microsoft Teams is updated by our Mac application updater. |
| Microsoft Teams classic | Microsoft Teams classic is retired software, removed rather than updated. |
| Microsoft Word | Microsoft Word updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Mozilla Firefox | Mozilla Firefox is kept current by Datto RMM's standard software list, with our Mac application updater measuring it alongside. |
| Mozilla Thunderbird | Mozilla Thunderbird is kept current by Datto RMM's standard software list, with our Mac application updater measuring it alongside. |
| NordLayer | NordLayer is updated by our Mac application updater. |
| Numbers | Numbers is updated through the App Store by its user. |
| OneDrive | OneDrive updates itself through Microsoft AutoUpdate, and our Mac application updater measures it and catches it up when it falls behind. |
| Pages | Pages is updated through the App Store by its user. |
| Postman | Postman is updated by our Mac application updater. |
| SentinelOne | SentinelOne is updated from the SentinelOne console: its security console owns the version. |
| Signal | Signal is updated by our Mac application updater. |
| Skype | Skype is retired software, removed rather than updated. |
| Skype for Business | Skype for Business is retired software, removed rather than updated. |
| Slack | Slack is updated by our Mac application updater. |
| Splashtop Streamer | Splashtop Streamer is updated by our Mac application updater. |
| Spotify | Spotify is updated by our Mac application updater. |
| Steam | Steam updates itself through its own updater. |
| TeamViewer | TeamViewer is updated by our Mac application updater. |
| Trello | Trello is updated through the App Store by its user. |
| Visual Studio Code | Visual Studio Code is updated by our Mac application updater. |
| VLC | VLC is updated by our Mac application updater. |
| Webex | Webex is updated by our Mac application updater. |
| Webroot SecureAnywhere | Webroot SecureAnywhere is kept current by Datto RMM's standard software list. |
| WhatsApp is updated by our Mac application updater. | |
| Windows App | Windows App is updated by our Mac application updater. |
| Zoom | Zoom updates itself through its own updater, and our Mac application updater measures it and catches it up when it falls behind. |
Windows servers
Servers take the same software updates as desktops, in a scheduled window rather than as soon as an update is found. Nothing is removed from a server automatically. Removing software from a server is a planned change.
| Policy | Covers | When updates run |
|---|---|---|
| Desktops and Macs | All Windows desktops and Macs | Immediately on detection |
| Servers | All Windows servers | Daily 06:00 for 1 hour |
The standard we hold to
Cyber Essentials requires security updates for high and critical vulnerabilities to be installed within 14 days of release. That is the standard we hold to. Where the catalogue does not carry a product, we keep it up to date with our own scripts where it can be installed silently.
The standard list: 25 products
| Software | Windows | macOS |
|---|---|---|
| 7-Zip | Yes | No |
| Adobe Acrobat Reader DC | Yes | Yes |
| Adobe AIR | Yes | Yes |
| Bitdefender GravityZone | Yes | No |
| Citrix Workspace | Yes | Yes |
| Datto File Protection | Yes | Yes |
| Datto Secure Edge | Yes | Yes |
| Datto Workplace Classic | Yes | Yes |
| FileZilla Client | Yes | Yes |
| Foxit PDF Reader | Yes | No |
| Google Chrome | Yes | Yes |
| Java Runtime Environment | Yes | Yes |
| Microsoft .NET Desktop Runtime | Yes | No |
| Microsoft Office 365 Current Channel | Yes | No |
| Microsoft Office 365 Monthly Enterprise Channel | Yes | No |
| Microsoft Visual C++ Redistributable | Yes | No |
| Mozilla Firefox | Yes | Yes |
| Mozilla Thunderbird | Yes | Yes |
| Notepad++ | Yes | No |
| Paint.NET | Yes | No |
| PuTTY | Yes | No |
| VLC Media Player | Yes | No |
| VMware Tools | Yes | No |
| Webroot SecureAnywhere | Yes | Yes |
| Zoom Workplace | Yes | No |
What we keep current
We keep 195 products up to date wherever they are installed. Where a product is not installed, nothing happens. They are grouped by the reason each one is on the list.
| Why | Products |
|---|---|
| In support until 10 November 2026. After that date the entry comes out and our .NET clean-up takes over. |
10 products.NET Desktop Runtime 8.0 (32-bit), .NET Desktop Runtime 8.0 (64-bit), .NET Desktop Runtime 9.0 (32-bit), .NET Desktop Runtime 9.0 (64-bit), ASP.NET Core Runtime 8.0, ASP.NET Core Runtime 9.0, Microsoft .NET SDK 8.0 (32-bit), Microsoft .NET SDK 8.0 (64-bit), Microsoft .NET SDK 9.0 (32-bit), Microsoft .NET SDK 9.0 (64-bit) |
| In support until November 2028. |
5 products.NET Desktop Runtime 10.0 (32-bit), .NET Desktop Runtime 10.0 (64-bit), ASP.NET Core Runtime 10.0, Microsoft .NET SDK 10.0 (32-bit), Microsoft .NET SDK 10.0 (64-bit) |
| In support, and serviced alongside Windows Update. |
1 productMicrosoft .Net Framework 4 |
| The Visual C++ v14 runtime, on almost every Windows device. |
2 productsMicrosoft Visual C++ Redistributable v14 for Visual Studio 2015-2026 (x64), Microsoft Visual C++ Redistributable v14 for Visual Studio 2015-2026 (x86) |
| A supported Java line. Java 8 updates reach devices within one business day of release. |
11 productsAdopt Open Java Development Kit 11, Adopt Open Java Development Kit 8, AdoptOpenJDK JRE with Hotspot 11, AdoptOpenJDK JRE with Hotspot 8, Amazon Corretto 11 x64, Amazon Corretto 17 x64, Amazon Corretto 8 x64, Amazon Corretto 8 x86, Java SE Runtime Environment 8 (32 bit), Java SE Runtime Environment 8 (64 bit), Java(TM) SE Development Kit 11 (64-bit) |
| The one Python line the catalogue still packages. Python 3.13 and later are kept current by our own scripts. |
2 productsPython 3.12 (32-bit), Python 3.12 (64-bit) |
| Keeps PowerShell 7.4 and 7.5 patched within their line. PowerShell 7.6 is kept current by our own scripts. |
4 productsPowerShell 7.4 (32-bit), PowerShell 7.4 (64-bit), PowerShell 7.5 (32-bit), PowerShell 7.5 (64-bit) |
| Developer and admin tooling. Kept inside the 14-day window wherever it is installed. |
47 productsApache Tomcat, Autoruns, AWS CLI V1 (32-bit), AWS CLI V1 (64-bit), AWS CLI V2, Azure CLI, Cmder (Portable), cURL, Cyberduck, Database .NET, DBeaver, Docker Desktop, Git, Grafana OSS, HxD, mRemoteNG, Nginx, Node.js LTS, Nuget, NXLog Community Edition, Octopus Deploy Tentacle, Oracle VM VirtualBox, Process Hacker, Process Monitor, Pulumi, PuTTY (32-bit), PuTTY (64-bit), Ruby, Rust, SmartFTP X64, SmartFTP X86, SourceTree, SQL Server Management Studio 18 (SSMS), SQL Server Management Studio 19 (SSMS), SQL Server Management Studio 20 (SSMS), Stripe CLI, Swiss File Knife, Tabby, Termius (Portable), Terraform, TortoiseGit, Visual Studio Code, VMware Workstation Player, Windows Terminal, WinMerge x64, WinMerge x86, WinSCP |
| An installed remote access tool is kept patched or removed, never left stale. Removal is a separate, checked step. |
16 productsAmazon WorkSpaces x64, Amazon WorkSpaces x86, AnyDesk, Citrix Receiver, Citrix Workspace, Go To Meeting, LogMeIn Client, Omnissa Horizon Client, Parallels Client-64 bit, Real VNC Viewer, Remote Desktop Manager Free, Splashtop Business Access, Splashtop Streamer, TeamViewer 14, TeamViewer 15, Tight VNC |
| Browsers, mail, meeting, chat and VPN clients: the software Cyber Essentials cares about most. |
27 products3CXPhone, 8x8 Work, Cisco Webex, Cisco Webex Meetings, Evernote, FortiClient VPN, Front, Google Chrome, Jabra Direct, Microsoft Edge, Microsoft Teams (work or school), Mozilla Firefox (32 bit), Mozilla Firefox (64 bit), Mozilla Firefox ESR (32 bit), Mozilla Firefox ESR (64 bit), Mozilla Thunderbird ESR x64, Mozilla Thunderbird ESR x86, Mozilla Thunderbird x64, Mozilla Thunderbird x86, OpenVPN, OpenVPN Connect, Pritunl, Slack, SonicWall NetExtender, Telegram (Portable), WeChat, Zoom |
| Opens files from outside the organisation, so it is kept current. |
41 products7-zip (32-bit), 7-zip (64-bit), Adobe Acrobat Pro/Standard (32-bit), Adobe Acrobat Pro/Standard (64-bit), Adobe Acrobat Reader DC (32-bit), Adobe Acrobat Reader DC (64-bit), Audacity (64 bit) for Windows, Audacity (86 bit) for Windows, Autodesk Design Review, Calibre (32-bit), Calibre (64-bit), CutePDF Writer, Draw.io x64, Draw.io x86, Foxit PDF Editor (perpetual), Foxit PDF Editor (subscription), Foxit Reader, GIMP, ImageGlass (32-bit), ImageGlass (64-bit), ImageMagick (Portable), Inkscape, iTunes, LibreOffice, Nitro Pro 13, Nitro Pro 14 Business, Nitro Pro 14 Enterprise, Nitro Pro 14 NLS, Nitro Pro 14 Retail, Nitro Pro 26 Named User, Notepad++ (32 bit), Notepad++ (64 bit), OpenOffice, PDFCreator (non-domain), PeaZip (32-bit), PeaZip (64-bit), VLC media player (x64 bit), VLC media player (x86 bit), WinRAR (32-bit), WinRAR (64-bit), WinZip |
| Our own tooling, and the Dell updater our manufacturer checks rely on. |
5 productsDatto File Protection, Datto File Protection Server, Datto Secure Edge, Datto Workplace, Dell Command Update |
| Cloud sync clients and password managers. |
8 productsBox Drive (32-bit), Box Drive (64-bit), Dropbox, Google Drive File Stream, KeePass 2, LastPass, Microsoft OneDrive, ownCloud Client |
| Guest tools on virtual machines. On servers the update lands in the server policy's scheduled window. |
1 productVMware Tools |
| Kept current wherever it is installed; nothing happens where it is not. |
15 productsAutoHotKey, Caffeine, CloudApp, Disk Usage, Everything (x64), Everything (x86), Greenshot, OBS Studio, Rufus, Screenpresso, ShareX, Shotcut, SQL Backup Master, TreeSize Free, WinDirStat |
What we remove
These products are removed from Windows desktops and laptops wherever they are found. Each one no longer works, is out of support, or has no place on a managed device. Where the When column says "After a check", removal is switched on only once the devices it would reach have been checked, because something there may still depend on it or someone may be using it on purpose. Nothing is removed from a server automatically.
| Software | Why | When |
|---|---|---|
| Atom (Portable) x64 (discontinued) | GitHub sunset Atom in December 2022, and it gets no fixes. | Wherever it is found |
| Atom (Portable) x86 (discontinued) | GitHub sunset Atom in December 2022, and it gets no fixes. | Wherever it is found |
| Backup and Sync from Google | Google replaced Backup and Sync with Google Drive for desktop in 2021, and it no longer works. | Wherever it is found |
| CCleaner | Unnecessary software under the secure configuration control, with a 2017 supply-chain compromise on its record. | After a check of the devices it would reach |
| Java SE Runtime Environment 7 (32 bit) | Oracle's public Java 7 updates ended in 2015. | After a check of the devices it would reach |
| Java SE Runtime Environment 7 (64 bit) | Oracle's public Java 7 updates ended in 2015. | After a check of the devices it would reach |
| Microsoft Teams | Classic Teams reached end of availability on 1 July 2025 and no longer works. New Teams is kept current as "Microsoft Teams (work or school)". | Wherever it is found |
| Python 2 | Python 2 reached end of life in January 2020. | After a check of the devices it would reach |
| QuickTime | Apple abandoned QuickTime for Windows in 2016 with known vulnerabilities left unfixed. | Wherever it is found |
| Skype (discontinued) | Skype was retired in May 2025 and no longer works. | Wherever it is found |
| TeamViewer 13 | TeamViewer no longer supports version 13. Anyone still using TeamViewer belongs on version 15. | After a check of the devices it would reach |
What we leave alone and why
These 114 catalogue entries are not in our policy. Each reason says what looks after the product instead, or why the entry would do nothing.
| Why | Entries |
|---|---|
| Click-to-Run updates Office, and the standard Software list already carries the Current and Monthly Enterprise channels. A per-application entry here would manage it twice. |
49 entriesMicrosoft Office 365 Business (Current), Microsoft Office 365 Business (Monthly), Microsoft Office 365 Business (SemiAnnual), Microsoft Office 365 Business - Access (Current), Microsoft Office 365 Business - Access (Monthly), Microsoft Office 365 Business - Access (SemiAnnual), Microsoft Office 365 Business - Excel (Current), Microsoft Office 365 Business - Excel (Monthly), Microsoft Office 365 Business - Excel (SemiAnnual), Microsoft Office 365 Business - OneNote (Current), Microsoft Office 365 Business - OneNote (Monthly), Microsoft Office 365 Business - OneNote (SemiAnnual), Microsoft Office 365 Business - Outlook (Current), Microsoft Office 365 Business - Outlook (Monthly), Microsoft Office 365 Business - Outlook (SemiAnnual), Microsoft Office 365 Business - PowerPoint (Current), Microsoft Office 365 Business - PowerPoint (Monthly), Microsoft Office 365 Business - PowerPoint (SemiAnnual), Microsoft Office 365 Business - Publisher (Current), Microsoft Office 365 Business - Publisher (Monthly), Microsoft Office 365 Business - Publisher (SemiAnnual), Microsoft Office 365 Business - Word (Current), Microsoft Office 365 Business - Word (Monthly), Microsoft Office 365 Business - Word (SemiAnnual), Microsoft Office 365 Enterprise (Current), Microsoft Office 365 Enterprise (Monthly), Microsoft Office 365 Enterprise (SemiAnnual), Microsoft Office 365 Enterprise - Access (Current), Microsoft Office 365 Enterprise - Access (Monthly), Microsoft Office 365 Enterprise - Access (SemiAnnual), Microsoft Office 365 Enterprise - Excel (Current), Microsoft Office 365 Enterprise - Excel (Monthly), Microsoft Office 365 Enterprise - Excel (SemiAnnual), Microsoft Office 365 Enterprise - OneNote (Current), Microsoft Office 365 Enterprise - OneNote (Monthly), Microsoft Office 365 Enterprise - OneNote (SemiAnnual), Microsoft Office 365 Enterprise - Outlook (Current), Microsoft Office 365 Enterprise - Outlook (Monthly), Microsoft Office 365 Enterprise - Outlook (SemiAnnual), Microsoft Office 365 Enterprise - PowerPoint (Current), Microsoft Office 365 Enterprise - PowerPoint (Monthly), Microsoft Office 365 Enterprise - PowerPoint (SemiAnnual), Microsoft Office 365 Enterprise - Publisher (Current), Microsoft Office 365 Enterprise - Publisher (Monthly), Microsoft Office 365 Enterprise - Publisher (SemiAnnual), Microsoft Office 365 Enterprise - Word (Current), Microsoft Office 365 Enterprise - Word (Monthly), Microsoft Office 365 Enterprise - Word (SemiAnnual), Skype for Business (Current) |
| Office 2019 left support on 14 October 2025. An install is a Cyber Essentials failure to replace with Microsoft 365 Apps, not one to keep patched or uninstall automatically. |
24 entriesMicrosoft Office 2019 Professional Plus (Current), Microsoft Office 2019 Professional Plus (Monthly), Microsoft Office 2019 Professional Plus (SemiAnnual), Microsoft Office 2019 Professional Plus - Access (Current), Microsoft Office 2019 Professional Plus - Access (Monthly), Microsoft Office 2019 Professional Plus - Access (SemiAnnual), Microsoft Office 2019 Professional Plus - Excel (Current), Microsoft Office 2019 Professional Plus - Excel (Monthly), Microsoft Office 2019 Professional Plus - Excel (SemiAnnual), Microsoft Office 2019 Professional Plus - OneNote (Current), Microsoft Office 2019 Professional Plus - OneNote (Monthly), Microsoft Office 2019 Professional Plus - OneNote (SemiAnnual), Microsoft Office 2019 Professional Plus - Outlook (Current), Microsoft Office 2019 Professional Plus - Outlook (Monthly), Microsoft Office 2019 Professional Plus - Outlook (SemiAnnual), Microsoft Office 2019 Professional Plus - PowerPoint (Current), Microsoft Office 2019 Professional Plus - PowerPoint (Monthly), Microsoft Office 2019 Professional Plus - PowerPoint (SemiAnnual), Microsoft Office 2019 Professional Plus - Publisher (Current), Microsoft Office 2019 Professional Plus - Publisher (Monthly), Microsoft Office 2019 Professional Plus - Publisher (SemiAnnual), Microsoft Office 2019 Professional Plus - Word (Current), Microsoft Office 2019 Professional Plus - Word (Monthly), Microsoft Office 2019 Professional Plus - Word (SemiAnnual) |
| Out of support. Our .NET clean-up removes these after reading what depends on each one; a blanket removal would break the software that pins them. |
20 entries.NET Core Desktop Runtime 3.1 (32-bit), .NET Core Desktop Runtime 3.1 (64-bit), .NET Core SDK 3.1 (32-bit), .NET Core SDK 3.1 (64-bit), .NET Desktop Runtime 5.0 (32-bit), .NET Desktop Runtime 5.0 (64-bit), .NET Desktop Runtime 6.0 (32-bit), .NET Desktop Runtime 6.0 (64-bit), .NET Desktop Runtime 7.0 (32-bit), .NET Desktop Runtime 7.0 (64-bit), ASP.NET Core Runtime 3.1, ASP.NET Core Runtime 5.0, ASP.NET Core Runtime 6.0, ASP.NET Core Runtime 7.0, Microsoft .NET SDK 5.0 (32-bit), Microsoft .NET SDK 5.0 (64-bit), Microsoft .NET SDK 6.0 (32-bit), Microsoft .NET SDK 6.0 (64-bit), Microsoft .NET SDK 7.0 (32-bit), Microsoft .NET SDK 7.0 (64-bit) |
| A Windows feature that Windows Update services. |
1 entryMicrosoft .Net Framework 3.5 |
| The catalogue no longer packages this line, so the entry would never update anything. It is reported and upgraded by our own scripts. |
10 entriesJava(TM) SE Development Kit 8 (32-bit) (discontinued), Java(TM) SE Development Kit 8 (64-bit) (discontinued), Python 3.10 (32-bit) (discontinued), Python 3.10 (64-bit) (discontinued), Python 3.11 (32-bit) (discontinued), Python 3.11 (64-bit) (discontinued), Python 3.8 (32-bit) (discontinued), Python 3.8 (64-bit) (discontinued), Python 3.9 (32-bit) (discontinued), Python 3.9 (64-bit) (discontinued) |
| The catalogue no longer packages it and the product updates itself, so the entry would do nothing. |
3 entriesFileZilla Client (discontinued), Opera (discontinued), VMware Workstation Pro (discontinued) |
| Its own console (ESET PROTECT, Malwarebytes Nebula, Tenable) owns the version. A second updater can break the agent's link to that console. |
7 entriesESET Endpoint Antivirus, ESET Endpoint Security, ESET Server Security, Malwarebytes, Malwarebytes 4, Malwarebytes 5, Nessus Agent |
Dated decisions
Some decisions hold only until a date the vendor has published, usually the end of support. When that date arrives, the product comes out of the policy and this page changes with it.
| Software | Decision holds until |
|---|---|
| .NET Desktop Runtime 10.0 (32-bit) | 14 November 2028 |
| .NET Desktop Runtime 10.0 (64-bit) | 14 November 2028 |
| .NET Desktop Runtime 8.0 (32-bit) | 10 November 2026 |
| .NET Desktop Runtime 8.0 (64-bit) | 10 November 2026 |
| .NET Desktop Runtime 9.0 (32-bit) | 10 November 2026 |
| .NET Desktop Runtime 9.0 (64-bit) | 10 November 2026 |
| ASP.NET Core Runtime 10.0 | 14 November 2028 |
| ASP.NET Core Runtime 8.0 | 10 November 2026 |
| ASP.NET Core Runtime 9.0 | 10 November 2026 |
| Microsoft .NET SDK 10.0 (32-bit) | 14 November 2028 |
| Microsoft .NET SDK 10.0 (64-bit) | 14 November 2028 |
| Microsoft .NET SDK 8.0 (32-bit) | 10 November 2026 |
| Microsoft .NET SDK 8.0 (64-bit) | 10 November 2026 |
| Microsoft .NET SDK 9.0 (32-bit) | 10 November 2026 |
| Microsoft .NET SDK 9.0 (64-bit) | 10 November 2026 |
Site variations
Every organisation we manage takes the policies above. A policy on the platform cannot be varied for one organisation, so where an organisation needs something different, we keep a separate copy of the whole policy for it and keep that copy in step by hand.
3 organisations run their own copy at the moment, for a different update window, software that another management tool looks after on some devices and a different Office update channel.
A customer's own copy, and the reason it exists, is described in that customer's service records.
Review
- Last reviewed: 24 October 2026
- Next review: 10 November 2026
- Policy record version: f02bdc9a
- The recorded policies in Datto match this page.
Changes to this page come from a change to the policy record, never the other way round.