Kentucky Fried Patching: Automating 1,000+ Apps Patch Management with Jamf Auto Update
Automate third-party app patching at scale with Jamf Auto Update. The Yum! Brands Apple team (KFC, Pizza Hut, Taco Bell, Habit Burger) shares how they reduced vulnerabilities by 39% in two weeks while managing 1,500+ workstations globally.
Kyle Gilmore, Justin Musk, Allen Lanning (Yum! infrastructure engineers) and Ben Toms (Principal Software Engineer, Jamf) explain the evolution from Munki/JAMJar to Jamf Auto Update, configuration strategies with 400+ policies, and uninstall workflows that competitors don't offer.
What you'll learn:
► Evolution from Munki/JAMJar open-source to Jamf Auto Update enterprise solution
► How Jamf Auto Update wraps Munki framework with Swift binary and schema
► Deploying 1,000+ app titles with automated patching workflows
► Building install, normal patch, forced patch, uninstall, and manual update policies
► Using external patch sources instead of built-in Jamf patch management
► Smart group strategies: deployment groups and patching groups (primary + latest version exclusions)
► Customizing user notifications with schema configuration
► Calculating ROI and securing executive approval for patch management tools
► Measuring impact: 39% vulnerability reduction in first two weeks, 20,000+ policy runs
► Uninstall workflows for compliance and license management
0:00 Introduction: Kentucky Fried Patching at Yum! Brands
2:17 The Problem: Manual Patching Doesn't Scale (120 Policies for Office Update)
4:25 Jamf Auto Update Architecture: Munki Client + Jamf Pro Server Integration
7:20 Evolution: JAMJar (2017) → Data Jar MSP (2020) → Jamf Auto Update (2023)
8:45 Business Case: Evaluating Tools and Securing Executive Approval
10:04 Configuration: External Patch Sources and Patch Management Titles
11:29 Smart Groups: Deployment and Patching Group Strategies
12:40 Five Policy Types: Install, Normal Patch, Forced Patch, Uninstall, Manual Update
16:17 Results: 39% Vulnerability Reduction, 20,000+ Policy Runs
19:05 Q&A: Architecture, App Requests, Ring Deployments, VPP, Uninstall Customization
Who this video is for:
► Mac administrators managing large-scale third-party app patching
► IT teams evaluating automated patch management solutions
► Enterprise organizations with 500+ Mac fleets
► Security teams reducing vulnerability remediation timelines
► Jamf admins seeking alternatives to manual patching workflows
#patchmanagement #enterprisesecurity #enterpriseit #vulnerabilitymanagement #jamf