USS - Managed Computer Updates

Overview

User Support Services (USS), a part of Information Services, uses enterprise device management to streamline processes, provide a more secure, sustainable, and efficient model for support, and provide self-service options for university-owned Windows and Mac computers. As part of this device management, computers will receive frequent updates to applications and the operating system to ensure stability and improved security.

This article will provide details on the end-user experience for these updates. 

More information about management can be found on the USS-Managed Computer Information article.

Windows Patching

Windows Operating System Monthly Patching

Microsoft releases updates for its Windows operating system on the second Tuesday of every month. These updates are internally evaluated for stability and then installed on all managed machines based on the department of the owner. Most monthly Windows updates require computer restarts. These restarts can be snoozed for an hour, up to a total of nine hours. During the last 20 minutes of the countdown, the restart notification can no longer be hidden. 

Users will see a prompt like this:

New Software is available - This is an MECM Patching prompt

Users will be prompted to reboot with a prompt like this:

Restart warning

Application self-patching

Microsoft Teams and some other applications will include a self-patching mechanism during installation. These are entirely controlled by the vendor and often deployed on a rolling basis to all customers. It is not possible to schedule or communicate these updates in a meaningful way, as they are constant, and it is not predictable when each individual may receive them. Applications may individually prompt the user to apply an update and/or restart themselves with little or no notice. 

Application updates

In order to address critical security issues that impact all/most of the managed computers at UO, USS has implemented automatic updates for select applications which have frequent security updates. These updates are automatically detected on a nightly basis. They are deployed to machines automatically and have three options to snooze the update (for two hours or more each time). If a restart is required they will have the standard nine hour restart delay. If an application is closed, it will be silently upgraded with no user intervention or notification.

Users may see a prompt like this (this notification does not occur if the application is not open, and can be patched without customer interruption):

Example of Update Screen for Automatic Applications

Macintosh Patching

Unlike Microsoft, Apple does not release updates on a strict cadence. Apple updates to macOS for security and functionality are released as Apple decides.

Apple releases multiple types of operating system updates. There are, from smallest to largest, security updates, minor operating system updates, and major operating system updates. 

Macintosh Minor Operating System Periodic Updates

Once an update is released it will be deployed to users after internal evaluation. Users will begin receiving notifications in all departments simultaneously after the internal evaluation, with the notifications becoming more frequent based on the customer's department. 

Users will see a prompt like this:

UO Software Update Prompt

Macintosh Major Apple Upgrades

In order to ensure devices are running the latest supported major operating system, USS will make a coordinated and project-based pushes to devices to ensure compliance. These will be communicated in advance to allow users to install on their own schedule as much as possible. Latest supported operating systems are determined by USS and based on numerous factors such as, but not limited to, security and stability. Based on the deadline set for that particular project, the user will see different messaging. 

Users will see a prompt similar to these:

  • Before Deadline:
    Before Deadline Prompt
  • After Deadline:
    After Deadline Update Prompt
  • After Proceeding: 
    After Proceeding Update Prompt.

Application Self-Patching

Teams, Office 365, and some other applications will include a self-patching mechanism on install. These are entirely controlled by the vendor and often deployed on a rolling basis to all customers. It is not possible to schedule or communicate these updates in a meaningful way, as they are constant, and it is not predictable when each individual may receive them. Applications may individually prompt the user to apply an update and/or restart themselves with little or no notice.

Application Updates 

In order to address critical security issues that impact all/most of the managed computers at UO, USS have implemented automatic updates for select applications which have frequent security updates.They are deployed to machines automatically and there are three chances to postpone the update (for 24 hours). If a user clicks Update it will force quit the app. Restarts are not required for application updates. If an application is closed, it will be silently upgraded with no user intervention or notification. 

Users may see a prompt like this (this notification does not occur if the application is not open, and can be patched without customer interruption):

Application Update Screenshot

Applications Automatically Patched

Below is a list of applications patched by automated systems on a routine basis. This list is not exhaustive and is subject to change without prior notice. 

macOS applications

  • Adobe Acrobat DC
  • Adobe Acrobat Reader DC
  • Blender
  • Google Chrome
  • Dropbox
  • Firefox
  • Handbrake
  • macOS and system level applications
  • Mac App Store Apps
  • Microsoft Defender
  • Microsoft Edge
  • Microsoft Office
  • Microsoft OneDrive
  • Microsoft Powershell
  • Microsoft Teams
  • Mozilla Thunderbird
  • Safari
  • Skype
  • VLC
  • VMWare Horizon Client
  • Zoom
  • Zotero

Windows applications

  • 1Password
  • 3Dconnexion 3DxWare 10
  • 7-Zip
  • Adobe Acrobat DC
  • Adobe Acrobat Reader
  • Adobe AIR Runtime
  • Adobe Connect (MSI)
  • Adobe Digital Editions
  • Adobe Flash Player Removal Tool
  • Adobe Lightroom
  • Amazon Corretto
  • Amazon WorkSpaces
  • Apple Application Support
  • Apple Bonjour
  • Apple iCloud
  • Apple iTunes
  • Apple Mobile Device Support
  • Apple Software Update
  • Arduino IDE V2
  • Atlassian Companion
  • Audacity
  • Autodesk AutoCAD
  • Autodesk Civil 3D 2022
  • Autodesk Design Review
  • Autodesk Revit
  • AutoHotkey
  • AWS Command Line Interface v2
  • AWS SAM Command Line Interface
  • AWS VPN Client
  • Azure Cosmos DB Emulator
  • Blender
  • Blue Jeans Outlook Addin
  • Bluebeam OCR
  • Bluebeam Revu
  • BlueJeans
  • Box Drive
  • Box For Office
  • BoxSync
  • BoxTools
  • Camtasia
  • CCleaner
  • Cisco AnyConnect Secure Mobility Client
  • Cisco Secure Client
  • Cisco WebEx
  • Citrix Workspace
  • Cyberduck (MSI)
  • DB Browser for SQLite
  • Dell Command Update
  • Dell Display Manager
  • DisplayLink
  • Docker for Windows
  • Driver Automation Tool
  • Dropbox
  • Duo Authentication for Windows Logon
  • Duo Device Health (MSI)
  • DYMO Connect
  • EndNote 20
  • Evernote
  • FileZilla
  • FortiClient VPN
  • Garmin Express
  • Gimp
  • Git (x86)
  • Git Extensions
  • GitHub CLI
  • Github Desktop Machine-Wide Installer
  • Google Chrome
  • Google Drive
  • Google Earth Pro
  • GoToMeeting
  • Gpg4win
  • GraphPad Prism Latest (MSI-x64)
  • Greenshot
  • HandBrake
  • IcedTea-Web
  • Inkscape
  • Intune Debug Toolkit
  • jamovi Desktop Current Release
  • JAWS 2023
  • K-Lite Codec Pack
  • KeePass
  • KeePassXC
  • Krita
  • LastPass
  • Lenovo Dock Manager
  • Lenovo Quick Clean
  • Lenovo System Update
  • Local Administrator Password Solution
  • Logi Bolt
  • Logi Options+ Offline
  • Logi Tune
  • Logitech Options
  • Logitech Unifying Software
  • LogMeIn Client
  • Malwarebytes
  • Mendeley Desktop
  • Microsoft Analysis Services OLE DB Provider
  • Microsoft Azure CLI
  • Microsoft Azure Data Studio
  • Microsoft Azure Functions Core Tools
  • Microsoft Azure Information Protection
  • Microsoft Azure PowerShell
  • Microsoft Azure Service Fabric
  • Microsoft Azure Storage Explorer
  • Microsoft Data Migration Assistant
  • Microsoft Defender
  • Microsoft Edge
  • Microsoft Edge WebView2 Runtime
  • Microsoft Mouse and Keyboard Center
  • Microsoft ODBC Driver
  • Microsoft Office Products
  • Microsoft OLE DB Driver
  • Microsoft OneDrive
  • Microsoft OpenJDK
  • Microsoft Power BI
  • Microsoft PowerToys
  • Microsoft Remote Help
  • Microsoft SQL Server Management Studio
  • Microsoft SQL Server Reporting Services
  • Microsoft Teams
  • Microsoft Visual C++ 2015-2022 Redistributable
  • Microsoft Visual Studio Code
  • Microsoft Windows and system level applications
  • Mozilla Firefox
  • Mozilla Firefox ESR
  • Mozilla Thunderbird
  • Nessus Agent 10
  • Node.js
  • Notepad++
  • NSClient++
  • NVDA
  • OBS Studio
  • On-Premises Data Gateway
  • OpenShot Video Editor
  • Opera
  • Oracle Java 8
  • Oracle Java SE Development Kit 8
  • Oracle MySQL Workbench Community Edition
  • Oracle VM VirtualBox
  • Paint.NET
  • Pidgin
  • Plantronics Hub
  • Power Automate Desktop
  • PowerShell Core
  • PreForm
  • PuTTY
  • Python 3.x
  • QGIS
  • Quarto
  • R For Windows
  • RealPlayer
  • Remote Desktop Client for Windows Desktop (x64)
  • Remote Desktop Manager
  • Remote Desktop WebRTC Redirector Service
  • RStudio
  • Salesforce CLI
  • SecureCRT
  • SketchUp Make
  • SketchUp Pro
  • Skype 8
  • Slack
  • Smartsheet
  • Snagit
  • Sourcetree
  • Splunk Universal Forwarder
  • SteelSeries GG
  • Sysmon
  • Tableau Desktop
  • Tableau Prep Builder
  • Tableau Reader
  • TeamViewer
  • TeXstudio
  • TreeSize Free
  • Trimble Connect
  • Trimble RINEX Converter
  • UltiMaker Cura
  • UltraEdit
  • Universal Print Connector
  • VitalSource Bookshelf
  • Vivaldi
  • VLC Media Player
  • VMware Horizon Client
  • VMware Remote Console
  • VMware Tools
  • VMware Workstation
  • WebEx
  • Webex VDI Plugin
  • WinRAR
  • WinSCP
  • WinZip
  • Wireshark
  • Wrike for Windows
  • XMind
  • Yubico Authenticator
  • YubiKey Manager
  • Zoom
  • ZoomText 2023
  • Zotero

Details

Article ID: 140405
Created
Fri 2/18/22 3:35 PM
Modified
Thu 10/12/23 2:23 PM