• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 419
  • Last Modified:

How to get users to run updates?

This is more of a social topic than a technical one. How do you get users to run their Windows Updates?

I use WSUS to track and manage the Windows Updates that our users get. My users may go months without running any updates, no matter how much I remind them through email. We deal with sensitive data so I need to make sure all vulnerabilities are patched. I cannot tell if this behavior is due to a lack of understanding of the importance, lack of time, lack of respect for the IT team, or just not caring due to no observable benefit in the past. We run a fairly liberal company so I do not want to force updates on a user at a random time of day.

I need to find an approach that is repeatable and enforceable within IT and does not require external intervention from managers. I don't want to resort to threats of any kind (e.g. say "or we'll do it for you", dock bonus, etc.) and would like any IT knowledge gained to extend into their personal computing as well.

Has anyone had any success in the past with any social techniques to get users to understand the importance of IT requests such as this? Thanks.

Signed,
Cranky IT Manager
0
MacGyverSolutions
Asked:
MacGyverSolutions
1 Solution
 
asavahCommented:
I know how you feel :(
In my practice I've used 3 ways:
1. Enforce update schedule via gpo.
2. Connect to remote pc or use psexec tool and run wuauclt.exe /detectnow on it.
3. In your environment I would deny all access to the guilty users, and request a hefty monetary penalty for him/her for infringing IT Security Policy. It's sad but it works, once you get a few of them fined the rest will know about it and start updating like crazy. Expect heavy load on WSUS server(s).

When you deal with loads of sheep-like users and "the good cop" method doesn't work you have to use "the bad cop" method, there are no other working social methods I know of.
0
 
DonNetwork AdministratorCommented:
Relying on users to install their own updates is very bad practice. You should schedule these updates to install at specific times

Look over:

Best Practices with Windows Server Update Services
http://technet.microsoft.com/en-us/library/cc708536%28v=ws.10%29.aspx

Managing the WSUS Automatic Updates Client Download, Install, and Reboot Behavior with Group Policy
http://technet.microsoft.com/en-us/library/cc512630.aspx
0
 
MacGyverSolutionsAuthor Commented:
Guess I'll have to go down the "bad cop" road!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now