Hello!
I am working on Windows 10 continuous updates. I would like to know if you find it useful for ITs to invest in change management tools such as WalkMe. Can it be used to guide users each time Microsoft releases a functionnary update for W10 ?
If so, do you have other tools in mind?
Thanks for your return,
Amélie
Better than a tool, it would be recommended you had a solid plan for updates, and I can explain you the reason for my statement. I am a Malware Researcher and, as you know, the WannaCry has infected millions of systems around the world because the malware explores a vulnerability (SMB v1), which a patch was released in Mar/14/2017.
Unfortunately, I know many companies that faced problems even using excellent and expensive inventory/management tools such as Altiris (from Symantec) because their main goal was “not interrupt the employee job for updates”. Usually, administrators postpone Windows server updates, but updates for workstation should be done as soon as possible (mainly security patches). Therefore, if you have a solid plan, so the tool is useful.
Finally, in my opinion, consider hiring someone focused on threat intelligence.
In time: I know the WalkMe, but it is as good as other tools.
I hope you have an amazing week.
Alexandre Borges.
Windows Server Update Services (WSUS), previously known as Software Update Services (SUS), is a computer program developed by Microsoft Corporation that enables administrators to manage the distribution of updates and hotfixes released for Microsoft products to computers in a corporate environment. WSUS downloads these updates from the Microsoft Update website and then distributes them to computers on a network. WSUS is an integral component of Windows Server.
technet.microsoft.com/en-us/library/cc708628(v=ws.10).aspx
We use Solar Winds MSP patch management, which is part of a managed service platform that can be offered to customers. Your customers, your prices, reasonable fees paid to SolarWinds.
JC
I don’t have idea for this tools, in our company we use WSUS (Windows Server Update Services) and SCCM to push updates into desktops.
Best Regards
Abderrahmane BRIEDJ
We use a tool called HP SA. It requires an agent installed on the client side. HP SA can be setup to download all MS patches ever week when they are released by MS. Then via patching policy you can build and rollout out your own custom patch policy to each of your clients or groups of your clients. Windows 2012, windows 10, Rhel, CentOS, ESXi etc. I do agree change tools are important I would just base the need on the amount of money I need to speed to automate this process to an extent. Have you tired a WSUS server for some Microsoft patch remediation of Microsoft OS's.
It's mostly for server but I do believe MS has docs out there to setup for desktops as well.