The NC State Endpoint Protection Standard requires university-owned computers to be joined to a Configuration Management System (CMS) that manages updates to the operating system, anti-malware, and other required software.
Patch Schedules
If you are concerned that updates may cause problems with your machine's ability to function, or interfere with the work that you do, it is important that you:
1.) Follow communications sent from the OIT Managed Desktop Service,
2.) Use the information to install the updates yourself, when that option is available, or work with OIT to have us install it for you.
3.) Discuss individual use cases or business needs and we may be able to offer alternatives to accommodate your needs.
The Active Directory Tech group and OIT conduct testing on some types of updates to identify and remediate the most common issues. Users who are concerned about problems caused by updates should take an active role in learning patching schedules, joining patching lists, follow news about the operating systems and new releases, and take advantage of self-service options to run updates at their own leisure when available.
Windows
- Reference: Microsoft Patch Tuesday
macOS
- OIT Managed Desktop Service customers using Macs currently have full control over installing all updates except for applications installed from the Apple App store (iLife, iWork, etc.), and software we patch, e.g. Firefox, Chrome, Microsoft Office, Acrobat Pro. These updates do not require a full system restart.
- Recommendation - To have the best control of the software update experience, install the updates as soon as you are able.
Communication
- For 1. full version operating system updates and 2. full version application updates on the supported applications that are included in the OIT Managed Desktop Service, e.g. Office Suite, Acrobat, Managed Desktops will communicate the schedule ahead of time to the LANTechs via the LANTech Google Group.
- Local LANTechs are expected to communicate this to users who may be affected.
- For other application updates, these are typically handled via the application and software vendors may automatically update their products on their own timetables (for example, Firefox or Chrome), but this is unrelated to the the OIT management process via a CMS.
Software Updates by Operating System
There are multiple types of updates and each category has different behaviors. Depending on the operating system, there can be full, variable, or minimal control of when they are deployed. However, in the OIT Managed Desktop environment advance notice will be provided in most cases for the ones that force a reboot. Processes and policies do sometimes differ depending on the operating system installed.
Choose your operating system to learn about the specifics of the type of updates for each OS.