Solved

Install patches & updates during reboot

Posted on 2013-05-24
6
368 Views
Last Modified: 2013-06-03
We face an issue with patching a large, Windows based client computer environment.

I am not talking about Microsoft OS patches but patches of applications. The problem is that end users have administrative privileges to their machines (no way to change this as it's a contractual requirement) and install their own software beside the software managed by us. Regrettably the installation of self-installed applications is not controlled in anyway and often their applications make use of our applications and therefore block files/processes.

Example:
 - We manage the email application and should patch it
 - We are aware of some additional tools, accessing the email application, hence before patching starts we check if the email applications as well as the tools known to us are closed
 - Regrettably there are other, "end user managed" tools out there (e.g. a calendar sync tool for whatever mobile device) which are keeping files/processes of the email application open and make a straight forward patching of affected PCs impossible

I assume other companies have similar issues. How do you overcome those?

E.g. is there a reliable solution to install patches during reboot?
0
Comment
Question by:CPAB
  • 4
  • 2
6 Comments
 
LVL 13

Expert Comment

by:Alexios
Comment Utility
Hello
Indeed the administrator privilege is an issue for the situation as you decribed it

Group policy is a good solution
0
 

Author Comment

by:CPAB
Comment Utility
@Kostasp: thank, but what do you exactly mean with "group policy is a solution"? Preventing the customer to install apps? We are regrettably not allowed to do so...
0
 
LVL 13

Accepted Solution

by:
Alexios earned 500 total points
Comment Utility
No, I was referring just to your question

Group policy is a good solution... for applying patches
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 

Author Comment

by:CPAB
Comment Utility
Ok, yes, that's an option.

Is somebody aware on how to realize something like this using Microsoft SCCM. We are currently patching using SCCM and have all processes and reports designed around this tool. Hence it would be nice if we could integrate such a "patch on reboot" solution into SCCM based patching...
0
 
LVL 13

Assisted Solution

by:Alexios
Alexios earned 500 total points
Comment Utility
Yes...
I think that you cannot configure that specific action with SCCM unfortunately
0
 
LVL 13

Expert Comment

by:Alexios
Comment Utility
Glad to help
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

Technology opened people to different means of presenting information, but PowerPoint remains to be above competition. Know why PPT still works today.
If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Viewers will learn how to maximize accessibility options in an Excel workbook for users with accessibility issues.
The viewer will learn how to create two correlated normally distributed random variables in Excel, use a normal distribution to simulate the return on different levels of investment in each of the two funds over a period of ten years, and, create a …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now