• Patch management 101


    I suddenly have the need to learn some patch management skills. What is the quickest way to get up to speed?

    We just converted our first 50 PCs from Win7 to WinX. Last Wednesday was our first patch recovery day with 6 in 50 PCs failing to open Word. That is a defect rate of 3/25. I was hoping for something like 1/1000. I’m even considering re-imaging them back to Win7.

    I refused to pay the Microsoft ransom to unlock my PCs. After 5 long phone calls they opened a case for free and they provided the key (information) I needed to unlock my disabled systems. Six social workers could not see clients during the outage.

    I see this business model to be quite similar to crypto-lockers.

    Collect Ransom

    Would anyone here accept a defect rate of 3/25 for any of the following:

    An HIV test
    The PC that controls the flood gates of your local reservoir
    Your hard drive, NAS/SAN
    Your pace maker
    Your pharmacy
    The laptop in your local sheriff’s patrol car

    So why is Microsoft exempted from QA 101 with a 6 sigma process and meaningful cpk?

    Why is the national security of the USA being put at risk? From my point of view forced updates is an automated malware delivery system. I for one never plan to pay a ransom to anyone to get my pc back, including MS. Imaging is too easy.

    Thanks for your time. I look forward to learning. But, my boss hates WSUS and his policy forbids all forms of cloud on our county domain.

    Kurt Angel

    Swain County, NC – IT

    Viewing 2 reply threads
    • #177263

      Just a quick response. For managing that many PCs, I would still push for WSUS.  It’s really the best way to control what gets updated when. Sorry…

      Willie McClure
      “We are trying to build a gentler, kinder society, and if we all pitch in just a little bit, we are going to get there.” Alex Trebek
    • #177350

      +1 for WSUS.

      cheers, Paul

    • #187220

      I use BatchPatch (https://batchpatch.com/) in combination with a WSUS server and am very happy with the combination. BatchPatch adds extra layers of visibility and control into the patching process and integrates nicely with WSUS.


    Viewing 2 reply threads
    Reply To: Patch management 101

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: