Windows Updates - Revision history

Eric Jones at 16:57, 6 December 2023

2023-12-06T16:57:20Z

← Older revision		Revision as of 16:57, 6 December 2023
Line 8:		Line 8:

	===== Patch Group Classification: =====		===== Patch Group Classification: =====
	Your servers are divided into different patch groups based on their criticality and specific requirements(the Practice Management or Imaging software an office uses, for example). Each group may have a different patching window, ensuring that the most critical systems receive patches first.		Your servers are divided into different patch groups based on their criticality and specific requirements (the Practice Management or Imaging software an office uses, for example). Each group may have a different patching window, ensuring that the most critical systems receive patches first.

	===== Priority on VM Hosts: =====		===== Priority on VM Hosts: =====
Line 14:		Line 14:

	===== Approval Policy: =====		===== Approval Policy: =====
	We understand that not all patches are suitable for every environment, which is why we deploy an Approval Policy. Our team of experts diligently reviews new patches weekly and processes them through the Approval Policy before deployment. This step allows us to filter out any patches that may cause compatibility issues or are not suitable for your specific environment. In cases where a patch is more harmful than helpful(for example if it breaks Practice Management software or prevents sensors/other hardware from working) we are able to blacklist the patch in question and uninstall it from endpoints where it has already been deployed.		We understand that not all patches are suitable for every environment, which is why we deploy an Approval Policy. Our team of experts diligently reviews new patches weekly and processes them through the Approval Policy before deployment. This step allows us to filter out any patches that may cause compatibility issues or are not suitable for your specific environment. In cases where a patch is more harmful than helpful (for example if it breaks Practice Management software or prevents sensors/other hardware from working) we are able to blacklist the patch in question and uninstall it from endpoints where it has already been deployed.

	===== Reboot Considerations: =====		===== Reboot Considerations: =====
Line 32:		Line 32:
	Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.		Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.
	== Frequently-Asked-Questions ==		== Frequently-Asked-Questions ==
	'''Why are my computers saying that they have updates waiting?'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.

	'''Why is my ~~computer missing X patch~~?'''<br />~~Because we patch once a week~~ there ~~will~~ be times when ~~patching is behind Microsofts release schedule. In general, recently released missing~~ patches ~~will be~~ installed ~~within 2 weeks of release~~. If ~~needed patches are not installed within this window then please reach out to DTP and we will investigate~~ the ~~issue and make any needed changes to ensure patching~~ is ~~occurring as intended~~.		===== '''Why are my computers saying that they have updates waiting?''' =====
			<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30-day uptime mark, then a prompt from Windows can certainly occur.

	'''Why ~~did~~ my computer ~~install patches outside of the scheduled window~~?'''<br />~~Microsoft has control over~~ patching ~~on all modern Windows operating systems. What this means~~ is ~~that they can initiate patching whenever they want~~. ~~However~~, ~~this is usually only done for critical vulnerabilities~~. If ~~you see patching installs occurring during business hours regularly~~ then please reach out to DTP ~~so that~~ we ~~can determine what's going on~~.		===== '''Why is my computer missing X patch?''' =====
			<br />Because we patch once a week there will be times when patching is behind Microsoft's release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window, then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.

	'''~~What all gets patched~~?'''<br />~~What doesn't get patched?!? We patch~~ all ~~active~~ Windows ~~OSes~~. ~~Operating systems~~ that ~~are on End of Life (Windows Server 2008~~, ~~Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft~~ is ~~no longer developing~~ for ~~those operating systems~~. On modern operating systems (Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that ~~are outright blocked are specific patches which~~ we ~~know to have a wide and harmful impact, which are added to a blacklist~~.		===== '''Why did my computer install patches outside of the scheduled window?''' =====
			<br />Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want. However, this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.

	'''Why did a vendor say I'm not receiving patches?'''<br />In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.		===== '''What all gets patched?''' =====
			<br />What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life (Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems (Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.

			===== '''Why did a vendor say I'm not receiving patches?''' =====
			<br />In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.

Eric Jones at 16:54, 6 December 2023

2023-12-06T16:54:15Z

← Older revision		Revision as of 16:54, 6 December 2023
Line 31:		Line 31:

	Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.		Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.
			== Frequently-Asked-Questions ==
			'''Why are my computers saying that they have updates waiting?'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.

			'''Why is my computer missing X patch?'''<br />Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.

	~~=== Frequently-Asked-Questions ===~~		'''Why did my computer install patches outside of the scheduled window?'''<br />Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want. However, this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.

	# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.		'''What all gets patched?'''<br />What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life (Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems (Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.
	# '''My computer is missing X patch'''<br />Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.
	# '''My computer installed patches outside of the window'''<br />Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want, however this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.		'''Why did a vendor say I'm not receiving patches?'''<br />In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.
	# '''What all gets patched?'''<br />What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life(Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems(Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.
	# '''My vendor ~~says~~ I'm not receiving patches'''<br />In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.

Hank Nix at 17:56, 26 July 2023

2023-07-26T17:56:03Z

← Older revision		Revision as of 17:56, 26 July 2023
Line 33:		Line 33:


	=== ~~FAQ:~~ ===		=== Frequently-Asked-Questions ===

	# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.		# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.

Hank Nix at 17:55, 26 July 2023

2023-07-26T17:55:27Z

← Older revision		Revision as of 17:55, 26 July 2023
Line 33:		Line 33:


	~~FAQs~~:		=== FAQ: ===

	# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.		# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.

Hank Nix at 17:54, 26 July 2023

2023-07-26T17:54:59Z

← Older revision		Revision as of 17:54, 26 July 2023
Line 35:		Line 35:
	FAQs:		FAQs:

	# My computers are saying that they have updates waiting! I thought you handled all patching!<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.		# '''My computers are saying that they have updates waiting! I thought you handled all patching!'''<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.
	# My computer is missing X patch		# '''My computer is missing X patch'''<br />Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.
	Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.		# '''My computer installed patches outside of the window'''<br />Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want, however this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.
	# My computer installed patches outside of the window		# '''What all gets patched?'''<br />What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life(Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems(Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.
	Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want, however this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.		# '''My vendor says I'm not receiving patches'''<br />In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.
	# What all gets patched?
	What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life(Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems(Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.
	# My vendor says I'm not receiving patches
	In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.

Hank Nix at 17:53, 26 July 2023

2023-07-26T17:53:44Z

← Older revision		Revision as of 17:53, 26 July 2023
Line 35:		Line 35:
	FAQs:		FAQs:

	# My computers are saying that they have updates waiting! I thought you handled all patching!		# My computers are saying that they have updates waiting! I thought you handled all patching!<br />Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.
	Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.
	# My computer is missing X patch		# My computer is missing X patch
	Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.		Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.

Hank Nix at 17:49, 26 July 2023

2023-07-26T17:49:10Z

← Older revision		Revision as of 17:49, 26 July 2023
Line 31:		Line 31:

	Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.		Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.


			FAQs:

			# My computers are saying that they have updates waiting! I thought you handled all patching!
			Though rare, there can be times when patches have been installed, but require a reboot before installation is complete. If enough time passes before the endpoint is rebooted by our 30 day uptime mark, then a prompt from Windows can certainly occur.
			# My computer is missing X patch
			Because we patch once a week there will be times when patching is behind Microsofts release schedule. In general, recently released missing patches will be installed within 2 weeks of release. If needed patches are not installed within this window then please reach out to DTP and we will investigate the issue and make any needed changes to ensure patching is occurring as intended.
			# My computer installed patches outside of the window
			Microsoft has control over patching on all modern Windows operating systems. What this means is that they can initiate patching whenever they want, however this is usually only done for critical vulnerabilities. If you see patching installs occurring during business hours regularly then please reach out to DTP so that we can determine what's going on.
			# What all gets patched?
			What doesn't get patched?!? We patch all active Windows OSes. Operating systems that are on End of Life(Windows Server 2008, Windows 7, Windows XP, etc) are generally not getting patches, as Microsoft is no longer developing for those operating systems. On modern operating systems(Windows 10+11, Windows Server 2016/2019/2022) we use the following general criteria: Critical Patches are always approved, as are Feature Packs, Definition Updates, and Critical Updates, among others. Driver updates must be manually installed, but they are not blocked. The only things that are outright blocked are specific patches which we know to have a wide and harmful impact, which are added to a blacklist.
			# My vendor says I'm not receiving patches
			In most cases what this means is that you're missing a driver patch for a corresponding piece of hardware. This is usually resolved by reaching out to us and coordinating the installation of the needed patch(es). In the event that no patching is occurring at all then DTP will investigate and ensure that patching is working accordingly.

Hank Nix at 16:35, 26 July 2023

2023-07-26T16:35:19Z

← Older revision		Revision as of 16:35, 26 July 2023
Line 11:		Line 11:

	===== Priority on VM Hosts: =====		===== Priority on VM Hosts: =====
	For environments with ~~virtual machines~~, we give priority to VM hosts, patching them two hours before ~~the~~ VMs. This methodology ensures that patching virtual environments goes smoothly and that the underlying infrastructure is secure before addressing individual VMs.		For environments with Virtual Machines, we give priority to VM hosts, patching them two hours before VMs. This methodology ensures that patching virtual environments goes smoothly and that the underlying infrastructure is secure before addressing individual VMs.

	===== Approval Policy: =====		===== Approval Policy: =====

Hank Nix at 16:34, 26 July 2023

2023-07-26T16:34:39Z

← Older revision		Revision as of 16:34, 26 July 2023
Line 1:		Line 1:
	~~Title:~~ Ensuring Secure and Reliable Windows Patching: A Look into our Process		==Ensuring Secure and Reliable Windows Patching: A Look into our Process==

	~~Dear Valued Customers,~~

	We understand the importance of maintaining the security and stability of your IT infrastructure~~. As your trusted technology partner, we take every precaution to ensure~~ your systems are up-to-date and protected against potential vulnerabilities. In this article, we'll provide insights into our Windows patching process and shed light on our schedule and methodology to keep your servers and virtual machines secure.		At Digital Technology Partners we understand the importance of maintaining the security and stability of your IT infrastructure; a critical element of that goal is ensuring that your systems are up-to-date and protected against potential vulnerabilities. In this article, we'll provide insights into our Windows patching process and shed light on our schedule and methodology to keep your servers and virtual machines secure.

	Our Patching Schedule: Our patching operations are carried out through Connectwise Automate, our Remote Management and Monitoring software. We have meticulously designed a schedule to minimize disruption to your operations while ensuring timely installation of critical patches. Patching is scheduled to occur on Friday mornings, between 2:00 AM and 6:00 AM.		===== Our Patching Schedule: =====
			Our patching operations are carried out through Connectwise Automate, our Remote Management and Monitoring software. We have meticulously designed a schedule to minimize disruption to your operations while ensuring timely installation of critical patches. Patching is scheduled to occur on Friday mornings, '''between 2:00 AM and 6:00 AM'''.

	Patch Group Classification: Your servers are divided into different patch groups based on their criticality and specific requirements. Each group may have a different patching window, ensuring that the most critical systems receive patches first.		===== Patch Group Classification: =====
			Your servers are divided into different patch groups based on their criticality and specific requirements(the Practice Management or Imaging software an office uses, for example). Each group may have a different patching window, ensuring that the most critical systems receive patches first.

	Priority on VM Hosts: For environments with virtual machines, we give priority to VM hosts, patching them two hours before the VMs. This methodology ensures that the underlying infrastructure is secure before addressing individual VMs.		===== Priority on VM Hosts: =====
			For environments with virtual machines, we give priority to VM hosts, patching them two hours before the VMs. This methodology ensures that patching virtual environments goes smoothly and that the underlying infrastructure is secure before addressing individual VMs.

	Approval Policy: We understand that not all patches are suitable for every environment, which is why we deploy an Approval Policy. Our team of experts diligently reviews new patches weekly and processes them through the Approval Policy before deployment. This step allows us to filter out any patches that may cause compatibility issues or are not suitable for your specific environment.		===== Approval Policy: =====
			We understand that not all patches are suitable for every environment, which is why we deploy an Approval Policy. Our team of experts diligently reviews new patches weekly and processes them through the Approval Policy before deployment. This step allows us to filter out any patches that may cause compatibility issues or are not suitable for your specific environment. In cases where a patch is more harmful than helpful(for example if it breaks Practice Management software or prevents sensors/other hardware from working) we are able to blacklist the patch in question and uninstall it from endpoints where it has already been deployed.

	Reboot Considerations: When patches require a reboot, we issue the reboot command during the scheduled patch window. However, if the patches do not require immediate reboot, ~~we allow~~ servers to reboot automatically after 30 days of continuous uptime. This approach ensures that servers are rebooted ~~promptly~~ to apply critical updates while maintaining system stability and minimizing interruptions to your daily operations.		===== Reboot Considerations: =====
			When patches require a reboot, we issue the reboot command during the scheduled patch window. However, if the patches do not require immediate reboot or if there is insufficient time for a reboot, servers will reboot automatically after 30 days of continuous uptime. This approach ensures that servers are rebooted efficiently to apply critical updates while maintaining system stability and minimizing interruptions to your daily operations.

	Our Commitment to Your Business: At every step of the patching process, our dedicated team of experienced technicians closely monitors the operations to ensure the smooth installation of patches without any disruptions to your business.		===== Our Commitment to Your Business: =====
			At every step of the patching process, our dedicated team of experienced technicians closely monitors the operations to ensure the smooth installation of patches without any disruptions to your business.

	Constant Vigilance: Patching is an ongoing process, and we remain vigilant to keep your systems up-to-date with the latest security patches. Our team is always on the lookout for emerging threats and vulnerabilities to proactively protect your infrastructure.		===== Constant Vigilance: =====
			Patching is an ongoing process, and we remain vigilant to keep your systems up-to-date with the latest security patches. Our team is always on the lookout for emerging threats and vulnerabilities to proactively protect your infrastructure. We do this through vendor alerts, patch mailing lists, and robust MSP community involvement.

	Transparency and Communication: We value transparency and open communication with our customers. If you have any specific concerns or questions regarding our patching process, please don't hesitate to reach out to our support team.		===== Transparency and Communication: =====
			We value transparency and open communication with our customers. If you have any specific concerns or questions regarding our patching process, please don't hesitate to reach out to our support team.

	As your partner in technology, our goal is to provide a safe and secure IT environment for your business. With our careful and well-planned patching process, you can rest assured that your systems are in capable hands.		As your partner in technology, our goal is to provide a safe and secure IT environment for your business. With our careful and well-planned patching process, you can rest assured that your systems are in capable hands.

	Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.		Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.

	~~Sincerely,~~

	~~[Your Company Name] [Your Contact Information]~~

Eric Jones: Created page with "Title: Ensuring Secure and Reliable Windows Patching: A Look into our Process Dear Valued Customers, We understand the importance of maintaining the security and stability of your IT infrastructure. As your trusted technology partner, we take every precaution to ensure your systems are up-to-date and protected against potential vulnerabilities. In this article, we'll provide insights into our Windows patching process and shed light on our schedule and methodology to ke..."

2023-07-26T15:16:02Z

Created page with "Title: Ensuring Secure and Reliable Windows Patching: A Look into our Process Dear Valued Customers, We understand the importance of maintaining the security and stability of your IT infrastructure. As your trusted technology partner, we take every precaution to ensure your systems are up-to-date and protected against potential vulnerabilities. In this article, we'll provide insights into our Windows patching process and shed light on our schedule and methodology to ke..."

New page

Title: Ensuring Secure and Reliable Windows Patching: A Look into our Process

Dear Valued Customers,

We understand the importance of maintaining the security and stability of your IT infrastructure. As your trusted technology partner, we take every precaution to ensure your systems are up-to-date and protected against potential vulnerabilities. In this article, we'll provide insights into our Windows patching process and shed light on our schedule and methodology to keep your servers and virtual machines secure.

Our Patching Schedule: Our patching operations are carried out through Connectwise Automate, our Remote Management and Monitoring software. We have meticulously designed a schedule to minimize disruption to your operations while ensuring timely installation of critical patches. Patching is scheduled to occur on Friday mornings, between 2:00 AM and 6:00 AM.

Patch Group Classification: Your servers are divided into different patch groups based on their criticality and specific requirements. Each group may have a different patching window, ensuring that the most critical systems receive patches first.

Priority on VM Hosts: For environments with virtual machines, we give priority to VM hosts, patching them two hours before the VMs. This methodology ensures that the underlying infrastructure is secure before addressing individual VMs.

Approval Policy: We understand that not all patches are suitable for every environment, which is why we deploy an Approval Policy. Our team of experts diligently reviews new patches weekly and processes them through the Approval Policy before deployment. This step allows us to filter out any patches that may cause compatibility issues or are not suitable for your specific environment.

Reboot Considerations: When patches require a reboot, we issue the reboot command during the scheduled patch window. However, if the patches do not require immediate reboot, we allow servers to reboot automatically after 30 days of continuous uptime. This approach ensures that servers are rebooted promptly to apply critical updates while maintaining system stability and minimizing interruptions to your daily operations.

Our Commitment to Your Business: At every step of the patching process, our dedicated team of experienced technicians closely monitors the operations to ensure the smooth installation of patches without any disruptions to your business.

Constant Vigilance: Patching is an ongoing process, and we remain vigilant to keep your systems up-to-date with the latest security patches. Our team is always on the lookout for emerging threats and vulnerabilities to proactively protect your infrastructure.

Transparency and Communication: We value transparency and open communication with our customers. If you have any specific concerns or questions regarding our patching process, please don't hesitate to reach out to our support team.

As your partner in technology, our goal is to provide a safe and secure IT environment for your business. With our careful and well-planned patching process, you can rest assured that your systems are in capable hands.

Thank you for entrusting us with your technology needs. We remain committed to delivering exceptional service and safeguarding your valuable data.

Sincerely,

[Your Company Name] [Your Contact Information]