Nobody should be walking office to office updating management agents by hand. In Endpoint Central the agent version is pulled along by the server — but 'automatic' still needs an admin who reads the version column and deals with the stragglers.
The relationship to understand is simple: the agent version belongs to the server version. When you upgrade your Endpoint Central server to a newer build, the managed agents receive the newer agent and update themselves through their normal check-ins — no separate agent project, no office tour with a pen drive. What the admin actually manages is the transition: a fleet temporarily running mixed versions (normal), the occasional PC that misses the update for weeks (the real work), and the discipline of checking the version column the way you check last-contact times. This guide covers all three.
Agent updates are not a separate download you hunt for. They ship with the Endpoint Central server: when ManageEngine releases a newer build and you upgrade your server, the corresponding agent version becomes the fleet's target, and agents pull it as they check in. This is why the earlier guides insisted on downloading agent packages fresh from your own console — a fresh package starts a PC at (or near) your server's current agent version, while a package saved from last year's pilot starts behind and must update itself anyway. It is also why 'which agent version should I install' has a boring correct answer: whatever your server is serving today.
During any server upgrade the fleet will honestly show two agent versions at once for a while. Machines check in on their own schedules — desktops today, the travelling laptop next week — so the version column turns over gradually, exactly like the last-contact column. Judge the rollout over days, not minutes: the share of current-version agents should climb steadily until only stragglers remain. The upgrade is finished when the remaining old-version rows are all explainable — off, on leave, or on your known problem list — not when the last row flips, because in a real office the last row is always a laptop in a drawer.
One PC still shows an old agent version weeks after the fleet moved: treat it as a small diagnosis, not a mystery. First, is it actually checking in? An old version with a fresh last-contact time means the agent works but its self-update is failing — check the machine's disk space, reboot it (a pending restart blocks more updates than any other single cause), and confirm it can reach the server and distribution server without interference. An old version with an old last-contact time is not an update problem at all — it is a dead or absent agent; use the verification and failure-ladder guides. If the agent is healthy but stubbornly refuses to update, the reliable exit is the unglamorous one: uninstall the old agent cleanly and install the current office package fresh.
Agent updates occasionally want a restart to complete, and an office that has learned to fear surprise restarts will fight you. The calm approach: let agent updates ride the normal check-in rhythm instead of forcing them mid-day, and fold any needed restarts into the same windows your users already accept for patching. Because the agent is the channel through which patching itself flows, keeping agent updates boring and predictable protects the credibility of the whole system. Announce server upgrades to your team as maintenance with a simple note — 'management agent will update itself this week; a restart may be requested' — and the fleet updates without a single support call.
It is tempting to freeze everything once it works — server and agents alike. Resist it. The agent is a privileged program with a network connection to every PC you own; its updates carry security fixes and protocol improvements, not just features. A fleet pinned to an old agent because the server was never upgraded is a fleet whose most powerful software is also its most out of date. Keep the server on a supported, current build on a sensible cadence — not every release the day it drops, but never years behind — and the agent versions take care of themselves as a side effect. Version hygiene is server hygiene; there is no separate agent project to schedule.
The video downloads the agent straight from the console — the habit that keeps every new PC starting on your server's current version.
▶️ Watch Full VideoNo. Agent versions ship with the Endpoint Central server. Upgrade the server and the agents receive the new agent version through their normal check-ins; your job is to watch the version column and handle stragglers.
Probably not. Agents check in on their own schedules, so the fleet turns over gradually over days. Judge the trend: the current-version share should keep climbing. Chase only PCs that stay old-versioned while actively checking in.
Reboot it first (pending restarts block updates), confirm disk space and server reachability, and if it still refuses, uninstall the old agent cleanly and install a fresh package downloaded from your console for that office.