Right Click Tools Patching System Requirements

The following software and network requirements must be in place to successfully implement Right Click Tools Patching in a Configuration Manager environment and/or an Intune environment.

Software Requirements

• Recast Management Server installed with Recast Proxy on a system that meets RMS requirements and has the necessary Proxy Permissions for Patching.

NOTE: Prior to beginning the initial Patching setup, both the user running the setup and the service account running the Recast Proxy require the TaskScheduler > StartTaskByName permission in RMS. You can grant the permission by adding it to the default Administrator role, or by a creating custom role.

Configuration Manager Integration

• Microsoft-supported version of Configuration Manager with the following set up in your ConfigMgr environment:
  • At least one Distribution Point Group
  • Collections that will be used for deployments

For instructions on setting up your ConfigMgr environment, see Set Up Configuration Manager for Patching.

Intune Integration

• Microsoft-supported version of Intune with Entra groups that will be used for deployments

To learn how to configure your Intune environment, see Set Up Intune for Patching.

Network Requirements

Disk space 

SMB network share for storing downloaded application installer with at least 50GB of free disk space.

Internal Network Communication

Patching uses WMI queries to communicate with the Configuration Manager Site Server. The WMI queries use RPC protocol over TCP/135. 

For more information, see Ports used for connections - Configuration Manager | Microsoft Learn.

External Domains

MECM and Intune Integrations

Patching checks for new application versions over the Internet and downloads application media from Azure using the HTTPS protocol over TCP/443.

Recast Management Server and Recast Proxy require outbound access to the following external domains:

Patching - Enterprise

• https://amprod02.recastsoftware.com - to access the application catalog
• https://amprodpub02.recastsoftware.com - to download application media and icons

Patching - Standard

• https://amprod01.recastsoftware.com - to access the application catalog
• https://amprodpub01.recastsoftware.com - to download application media

Intune Integrations Only

For Intune integrations, the Recast Proxy requires outbound access to the following domains over TCP/443:

• https://login.microsoftonline.com - for Entra ID authentication
• https://graph.microsoft.com - to connect to the Microsoft Graph REST API