Why are all patch management solutions terrible in one way or another

Posted by RikiWardOG@reddit | sysadmin | View on Reddit | 43 comments

Is it just that Windows architecture is shit so the only option is to scan the registry and you're stuck relying on vendors properly cleaning up the keys? I mean that seems to be part of it. But like so far I've seen vendors reporting wildly wrong versions installed that I can't even find in the registry, to absolute joke reporting capabilities, to reboot requests multiple times withing 5 minutes when you snooze for 8hrs, agents not starting on reboot, you name it every single product I've demod or tested so far seems severely flawed in one way or another. They all want to claim they're better but they're all just doing a terrible job of scanning the registry and manually updating their patch catalogue it seems.