MatZeRO Posted September 27, 2017 Posted September 27, 2017 I’m curious to know how long it generally takes you guys to get patched 100%? I.e. how long between MS releasing and you having all servers and endpoints fully updated? It seems on my WSUS server our pie charts are never fully green!
elsiegee40 Posted September 27, 2017 Posted September 27, 2017 I’m curious to know how long it generally takes you guys to get patched 100%? I.e. how long between MS releasing and you having all servers and endpoints fully updated? It seems on my WSUS server our pie charts are never fully green! That very much depends on how much hardware you have on site. I could get it all done in a day at my last school!
MatZeRO Posted September 27, 2017 Posted September 27, 2017 That very much depends on how much hardware you have on site. I could get it all done in a day at my last school! Very true. We have around 750 machines to patch, 160 are staff laptops that are always in use on and off site. Patching the laptops is the most difficult device to get sorted.
DavR Posted September 28, 2017 Author Posted September 28, 2017 I'm never 100% patched, I've always got a few that are never quite up to date, either because they're rarely used PCs in corners, or laptops that aren't on long enough to finish updates / report in. I look every few months and force the worst offenders, but it's a losing battle!
mavhc Posted September 28, 2017 Posted September 28, 2017 WOL + Do Not Turn Off stickers for desktops. For laptops wake up at 2am if on power, for those left charging, also set to install updates from MU too
mullet_man Posted December 7, 2017 Posted December 7, 2017 Our laptops wake for the 2am scheduled maintenance and I've set updates to install during that period. Those laptops that anyone bothered to plug in when they finished using them generally wake up and install the updates, I also schedule a wake up just before 7am and then a reboot at 7am to try and make sure everything has installed and if there are 20 minute reboot times they should happen then instead of when an impatient student is trying to login. It's not perfect, as any member of staff would tell you, but it's the best I can do. Hi Squelch, Am having issues with laptops and updates - how do you get them to boot up at 2am - via the BIOS settings? I might have a test with this approach. We are on old spinny HDs so Windows 10 updates can take a while to install.
Squelch Posted December 7, 2017 Posted December 7, 2017 I make sure the laptops go to sleep when not in use and then schedule a wake up via GPO just before 2am. Wake timers are key here, google them to find out how to switch them on. That way I can be sure the laptops are performing their scheduled maintenance around 2am. Also via GPO configure windows update to install during the maintenance period. Voila! 1
mullet_man Posted December 7, 2017 Posted December 7, 2017 Thanks - will take a look at that approach. We use configmgr for updates but could schedule the maintenance windows to be at the same time so in theory updates would install. What happens if laptops are shutdown? They will get the update the next day if let on?
Squelch Posted December 7, 2017 Posted December 7, 2017 If they are shutdown then they can't wake to install the updates. Once W10 knows there are updates available then it starts a two day timer. If the updates have not been installed by whatever schedule you have set by the time the timer ends then W10 installs the updates straight away (causing much wailing and moaning here). I've removed the shutdown option from the power menu so the pupils can only log off, this allows them to go to sleep and then they have a fighting chance of installing the updates within the two day timer. I've also recently upgraded all of our laptops to SSD's which helps everything. 1
free780 Posted December 7, 2017 Posted December 7, 2017 With WSUS/SUP have a target group/collection with a ADR with a few days delay. If OK then approve to a manual ADR for the rest of your clients. You can write a script to wake out of hours. Force machines to wake and reboot early in the morning forcing log offs. This is all based on moving to standby. 1
mullet_man Posted December 8, 2017 Posted December 8, 2017 Thanks am looking into changing the laptops to sleep rather than shutdown today, and then get them to wake up at a certain point in the night to apply updates. I'll keep you updated on my progress....
mullet_man Posted December 8, 2017 Posted December 8, 2017 If they are shutdown then they can't wake to install the updates. Once W10 knows there are updates available then it starts a two day timer. If the updates have not been installed by whatever schedule you have set by the time the timer ends then W10 installs the updates straight away (causing much wailing and moaning here). I've removed the shutdown option from the power menu so the pupils can only log off, this allows them to go to sleep and then they have a fighting chance of installing the updates within the two day timer. I've also recently upgraded all of our laptops to SSD's which helps everything. How have you removed the shutdown option from the start menu? Can't seem to find the GP?
mullet_man Posted December 8, 2017 Posted December 8, 2017 OK I've one so I can remove shutdown, sleep and restart. So they can only sign out, so just need to remove shutdown from the login screen - is that possible?
mullet_man Posted December 8, 2017 Posted December 8, 2017 OK new plan - looks like I can apply power settings in configmgr and setup a wakeup timer.
mullet_man Posted December 8, 2017 Posted December 8, 2017 New new plan - it doesn't wake laptops up. Am giving up!
Squelch Posted December 11, 2017 Posted December 11, 2017 (edited) That's the spirit! I don't think you can remove shutdown from the login screen. I just removed it from the start menu. My scheduled task to wake them is this Edited December 11, 2017 by Squelch
mullet_man Posted December 11, 2017 Posted December 11, 2017 Haha thanks for this Squelch, I've adjusted my power settings so they go to sleep rather than shut down so will have a look at that task to wake them tomorrow. I have a script that shuts down the devices, and am fairly sure I could set them to sleep rather than turn off.
mullet_man Posted December 12, 2017 Posted December 12, 2017 OK I've added a new scheduled task and put my devices to sleep rather than shutdown each day. Will see what happens.
mullet_man Posted December 13, 2017 Posted December 13, 2017 That's the spirit! I don't think you can remove shutdown from the login screen. I just removed it from the start menu. My scheduled task to wake them is this [ATTACH=CONFIG]46671[/ATTACH] Is there anything special I need to do with this scheduled task? I've got it set the same as you and set to wake the computer from sleep but doesn't seem to work. Am testing again now just in case I've messed something up. I've got my script adjusted to put the computers to sleep which seems to be working OK.
Squelch Posted December 13, 2017 Posted December 13, 2017 Did you enable wake timers? How to Enable Wake Timers - Adam's Site 1
mullet_man Posted December 14, 2017 Posted December 14, 2017 Ah right so will be why, if I get five tomorrow I’ll see if I can get this implemented. Thanks Squelch.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now