How to get users to run updates?

Posted on 2012-09-05
Medium Priority
Last Modified: 2012-09-19
This is more of a social topic than a technical one. How do you get users to run their Windows Updates?

I use WSUS to track and manage the Windows Updates that our users get. My users may go months without running any updates, no matter how much I remind them through email. We deal with sensitive data so I need to make sure all vulnerabilities are patched. I cannot tell if this behavior is due to a lack of understanding of the importance, lack of time, lack of respect for the IT team, or just not caring due to no observable benefit in the past. We run a fairly liberal company so I do not want to force updates on a user at a random time of day.

I need to find an approach that is repeatable and enforceable within IT and does not require external intervention from managers. I don't want to resort to threats of any kind (e.g. say "or we'll do it for you", dock bonus, etc.) and would like any IT knowledge gained to extend into their personal computing as well.

Has anyone had any success in the past with any social techniques to get users to understand the importance of IT requests such as this? Thanks.

Cranky IT Manager
Question by:MacGyverSolutions
LVL 10

Accepted Solution

asavah earned 450 total points
ID: 38368491
I know how you feel :(
In my practice I've used 3 ways:
1. Enforce update schedule via gpo.
2. Connect to remote pc or use psexec tool and run wuauclt.exe /detectnow on it.
3. In your environment I would deny all access to the guilty users, and request a hefty monetary penalty for him/her for infringing IT Security Policy. It's sad but it works, once you get a few of them fined the rest will know about it and start updating like crazy. Expect heavy load on WSUS server(s).

When you deal with loads of sheep-like users and "the good cop" method doesn't work you have to use "the bad cop" method, there are no other working social methods I know of.
LVL 47

Expert Comment

by:Donald Stewart
ID: 38368533
Relying on users to install their own updates is very bad practice. You should schedule these updates to install at specific times

Look over:

Best Practices with Windows Server Update Services

Managing the WSUS Automatic Updates Client Download, Install, and Reboot Behavior with Group Policy

Author Closing Comment

ID: 38416252
Guess I'll have to go down the "bad cop" road!

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many companies are making the switch from Microsoft to Google Apps (https://www.google.com/work/apps/business/). Use this article to learn more about what Google Apps has to offer and to help if you’re planning on migrating to Google Apps. It is …
The new Microsoft OS looks great, is easier than ever to upgrade to, it is even free.  So what's the catch?  If you don't change the privacy settings, Microsoft will, in accordance with the (EULA) you clicked okay to without reading, collect all the…
The viewer will learn how to simulate a series of sales calls dependent on a single skill level and learn how to simulate a series of sales calls dependent on two skill levels. Simulating Independent Sales Calls: Enter .75 into cell C2 – “skill leve…
The viewer will learn how to use a discrete random variable to simulate the return on an investment over a period of years, create a Monte Carlo simulation using the discrete random variable, and create a graph to represent the possible returns over…

755 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question