How to decide which server patches to apply?

[JaredCleghorn]

How do you decide which patches to apply to ArcGIS servers? Our organization has numerous servers used for different things. For example, we have Portal servers, servers with various extensions, and servers dedicated to specific extensions. What is the best practice for deciding which patches to install for each server? Should we install all patches on every server, or should we only apply patches that are relevant. Take this patch for example:

ArcGIS Data Reviewer 10.8.1 Patch 1 for (Desktop | Server) 

"This patch is cumulative of all previously released Patches and Hot Fixes for ArcGIS Data Reviewer 10.8.1. Please download and install this patch at your earliest convenience."

Should this be applied to all of our 10.8.1 servers, or should we only apply the patch to servers that have Data Reviewer?

[MichaelGinzburg]

There is a utility which displays all available patches for installed ArsGIS Server software. The patches also may be installed using the utility.

https://enterprise.arcgis.com/en/server/latest/install/windows/check-for-software-patches-and-update... 

[JaredCleghorn]

We have servers that cannot use that utility. It is blocked by firewall or something. Is there a manual process to identifying which patches are needed?

[JaredCleghorn]

Fantastic! So, this will decide based on what is installed on the server, leaving out the guess work?

[MichaelGinzburg]

Yes. I have successfully tried it on AGS 10.6