I recommend you create a separate resource group in Azure for this and just deploy a Windows 10 machine in that resource group. You need a Azure Subscription to run this on. Take a look here for all their youtube videos on how to get started: Setting up the VM in Azure with Just In Time Access

I will not be going through the actual setup of Patch My PC as this is well documented by Justin and his team already. In the rest of this post, I will show you my setup and walk you trough my experiences using this since the private preview. I decided I did not want to run this on my own machine and being depended of my laptop to be up and running, so I looked to Azure for setting this up. So in June 2019 I added a user voice request to Patch My PC for Intune support, 6 months later this was out in preview and now this is released and actually even allows you to run this on a Windows 10 machine. I simply did not have the time to handle this for 10 clients even. I mean we have Microsoft Defender ATP telling me what 3rd party software runs on all my clients, but for me to actually patch that I had to download the software, package it up with the Win32 App Packaging tool for Intune and the deploy it to the machines that had the vulnerable apps installed. As we still have the need of patching 3rd party software on our clients I started looking into how we could do this about a year ago and at the time, the options where not great.

In our company we are consuming a 100% cloud services and we have literally zero servers, network or infrastructure at all.

My patch pc