Skip to main content

KB: Patching Visual Studio with OneSite Patch

Updated

Summary

This article provides instructions on how to configure and patch Microsoft Visual Studio using OneSite Patch. Due to Visual Studio's default behavior, administrative intervention is required to enable "Administrator" installed updates, allowing OneSite Patch to manage the update process centrally.

Pre-requisites

  1. Licensing: Each device must have the Microsoft Patch Add-on license (verify WinPatch is enabled in license.log).

  2. Visual Studio Client Detector Utility: Must be installed on all target devices. You can use a Strategy to deploy the utility.

  3. Administrator Updates Configuration: Visual Studio must be configured to allow updates managed by a central administrator.

Configuration Method 1: Group Policy (GPO) - Recommended

To manage this setting via GPO, you must first install the Visual Studio Administrative Templates (ADMX/ADML).

  1. Download Templates: Grab the Visual Studio Group Policy Administrative Template files (ADMX/ADML) from the Microsoft Download Center.

  2. Install Templates: Copy the files to C:\Windows\PolicyDefinitions on your domain controller or management machine.

  3. Configure Policy:

    • Open the Local Group Policy Editor.

    • Navigate to: Computer Configuration > Administrative Templates > Visual Studio > Install and Update Settings.

    • Set Administrator updates to Enabled.

Configuration Method 2: Microsoft Intune

Visual Studio policies are now included in the Intune Settings Catalog, making manual template imports unnecessary for cloud-managed devices.

  1. Create a Device Configuration Profile in Intune.

  2. Select Settings catalog.

  3. Search for "Visual Studio" and add the Administrator Updates policy.

Configuration Method 3: Registry Key

If GPO/Intune is not feasible, set the following registry key:

  • Path: HKLM:\SOFTWARE\Policies\Microsoft\VisualStudio\Setup

  • Value Name: AdministratorUpdatesEnabled

  • Value Type: REG_DWORD

  • Value Data: 1 (Enables updates) or 2 (Enables updates and background downloads)

Detection and Deployment Process

  • Cycle 1: Visual Studio is detected; Client Detector Utility is installed via policy.

  • Cycle 2: Once the Detector Utility and Registry/GPO settings are present, OneSite Patch detects applicable patches.

  • Cycle 3: Patches are deployed the next time the Strategy runs.
    Expect at least two scans and two Strategy cycles for a device to be fully updated.

See also: https://learn.microsoft.com/en-us/visualstudio/liveshare/use/policies-visual-studio