Week 12 - Lesson 19: Configuring and Managing Updates Click the graphic for assessment

Overview Exam Objective 6.1: Configure and manage updates Configure update settings Configure Windows Update policies Manage update history Roll back updates Update Windows Store apps Lecture notes go here CIT 211 Chapter19: Updates

Configuring Update Settings Lesson 19: Configuring and Managing Updates Configuring Update Settings Lecture notes go here CIT 211 Chapter19: Updates

Checking for Updates To protect a Windows 8.1 operating system, Microsoft Updates can be downloaded and installed from the Control Panel by the end users. There are several categories of updates provided by Microsoft; each category prioritizes the updates based on importance and recommended use by the end user. Important updates Recommended updates Optional updates Security updates Service Packs Critical updates CIT 211 Chapter19: Updates

Checking for Updates Important updates can be configured to be installed automatically and typically included updates that fix or improve security, privacy, and reliability within the OS or application. Recommended updates can be configured to install automatically and typically take care of non-critical problems that might enhance end-user usability with the software. Optional updates must be installed manually and might include updates, drivers, and software not typically installed with the operating systems. Security updates, rated as critical, important, moderate or low, are released to fix product-specific security-related vulnerabilities that might affect end-user or enterprise systems. Critical updates fix critical, non-security related “bugs.” Service Packs are a cumulative package of updates and patches released for a system or application over a period of time. CIT 211 Chapter19: Updates

Checking for Updates The Choose how updates get installed screen CIT 211 Chapter19: Updates

Changing Update Settings For users that require different download and installation options, update settings are configurable based on the end-user requirements. Important updates can be downloaded and applied by selecting one of the following selections. Install updates automatically (recommended) Download updates but let me choose whether to install them Check for updates but let me choose whether to download and install them Never check for updates (not recommended) CIT 211 Chapter19: Updates

Using the Windows Update Control Panel The Choose your Windows Update settings page CIT 211 Chapter19: Updates

Hiding and Restoring Updates Occasionally, there are updates that are available that you do not want to be reminded of, or installed, until you are ready to install them. Hiding them from view eliminates the need to manually remove the update when you are installing updates in Windows Update. If an update was hidden from view, it can be easily restored from its hidden view status, allowing it to be installed. CIT 211 Chapter19: Updates

Configuring Windows Update Policies Lesson 19: Configuring and Managing Updates Configuring Windows Update Policies Lecture notes go here CIT 211 Chapter19: Updates

Configuring Policies to Manage Updates Since Windows 2000, administrators have been able to configure Windows Update using Group Policy. You can configure Local Policy on a local system by using the Local Group Policy Editor on that computer. In an enterprise environment, you can create Group Policy Objects (GPOs) and apply them to a site, a domain, or an organizational unit. By linking a GPO to an AD DS object, you deploy all of the policy settings in the GPO to the computers and users contained in the object. CIT 211 Chapter19: Updates

Configuring Policies to Manage Updates Group policies are configured to force update settings and administration to be identical, or to meet the technical requirements of domain members throughout a Windows domain. To view the configurable Windows Update policy settings, run the Local Group Policy editor on a computer and navigate to the following location Computer Configuration > Administrative Templates > Windows Components > Windows Update. CIT 211 Chapter19: Updates

Navigating to Windows Update policies Configuring Local Computer Policies and Microsoft Domain Group Policies to Manage Updates Navigating to Windows Update policies CIT 211 Chapter19: Updates

Install Updates and Shut Down Dialog Box Policy The Do not display Install Updates and Shut Down option in Shut Down Windows dialog box policy removes, or keeps in place the Install Updates and Shut Down option when shutting down the system. CIT 211 Chapter19: Updates

Default Option to Install Updates and Shut Down Dialog Box Policy The Do not adjust default option to Install Updates and Shut Down in Shut Down Windows dialog box policy allows the end users to maintain their default shut down selection when shutting down from the Shut Down Windows dialog box. CIT 211 Chapter19: Updates

Wake Up to Install Scheduled Updates Policy Windows machines that are in hibernation can be configured to wake from hibernation, install updates, and return to hibernation once the update installations have completed. The Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates policy can wake the system up to perform scheduled updates. CIT 211 Chapter19: Updates

Automatic Updates Policy One of the required policies for system wide control of Automatic Updates, the Configure Automatic Updates policy sets the method of downloading and installing Automatic Updates. CIT 211 Chapter19: Updates

Intranet Microsoft Update Service Location Policy The Specify intranet Microsoft update service location policy allows the system administrator to configure devices meeting the scope of the policy to receive updates from the intranet WSUS or SCCM server. CIT 211 Chapter19: Updates

Automatic Updates Detection Frequency Policy The Automatic Updates detection frequency policy controls how often the system will check for new updates to download and install. CIT 211 Chapter19: Updates

Non-Administrator Update Notification Policy Enabled by default on Windows 8.0/8.1 devices, the Allow non-administrators to receive update notifications policy allows non-administrators on non-Windows 8/8.1 devices to receive update notifications. CIT 211 Chapter19: Updates

Software Notifications Policy The Turn on Software Notifications policy notifies the end user of pending optional or featured updates are waiting for download or installation. CIT 211 Chapter19: Updates

Immediate Installation of Automatic Updates Policy The Allow Automatic Updates immediate installation policy triggers the system to install updates once they have been downloaded and prepared for installation. CIT 211 Chapter19: Updates

Recommended Updates through Automatic Updates Policy The Turn on recommended updates via Automatic Updates policy allows automatic installation of both important and recommended updates. CIT 211 Chapter19: Updates

No Auto-Restart with Logged On Users Policy Configuring the No auto-restart with logged on users for scheduled automatic updates installations policy prevents a system from rebooting immediately after an update has installed if a user is logged in. CIT 211 Chapter19: Updates

Re-Prompt for Restart with Scheduled Updates Policy The Re-prompt for restart with scheduled installations policy, re-prompts users to restart at a specified interval. If the end user postpones a restart after automatic updates have been installed, the re-prompt for restart policy will notify the end user at the time specified. CIT 211 Chapter19: Updates

Delay Restart for Scheduled Installations Policy An administrator may modify the Delay Restart for scheduled installations policy to allow additional time for the user to finish work before the restart is initiated. CIT 211 Chapter19: Updates

Reschedule Automatic Updates Scheduled Installations Policy If a scheduled Automatic Update was not performed, the amount of time to wait for the next attempt at installation can be rescheduled to happen at next startup. This is configured through the Reschedule Automatic Updates scheduled installations policy. CIT 211 Chapter19: Updates

Enable Client-Side Targeting Policy By configuring multiple group policies, multiple group names can be sent to the intranet Microsoft update servers. These groups are configured in the “Enable client-side targeting” policy. Allowing the intranet Windows update server administrator the ability to deploy, choose selected updates, and/or delay updates based on specified target group. CIT 211 Chapter19: Updates

Allow Signed Updates from an Intranet Microsoft Update Service Location Policy Microsoft, by default, allows only the installation of updates that are signed by Microsoft. By configuring the Allowed signed updates from an intranet Microsoft update service location policy, an administrator can permit trusted updates from being installed that are not signed by Microsoft. CIT 211 Chapter19: Updates

Managing Update History Lesson 19: Configuring and Managing Updates Managing Update History Lecture notes go here CIT 211 Chapter19: Updates

Viewing Update History All updates that are installed on the Windows 8.1 system can be viewed, sorted by Name, Status, Importance, and Date installed from within the Control Panel. All installed updates are listed within the View update history windows within Windows Update. The View update history window also provides detailed information about what the installed update fixes, or what security risks are patched with a specific update. CIT 211 Chapter19: Updates

Lesson 19: Configuring and Managing Updates Rolling Back Updates Lecture notes go here CIT 211 Chapter19: Updates

Rolling Back Updates You can perform any of the following tasks to roll back an update to get a system back to its original state before an update caused an issue: Performing a system restore of the system to a time before the problem update was installed. Manually uninstalling an update to remove roll back the newest version of an update to the prior version of the update. If a system was working properly before updates were installed, it is beneficial to review the latest installed updates and begin troubleshooting update problems by uninstalling the most recently installed updates as listed. CIT 211 Chapter19: Updates

Updating Windows Store Applications Lesson 19: Configuring and Managing Updates Updating Windows Store Applications Lecture notes go here CIT 211 Chapter19: Updates

Updating Windows Store Apps Windows Store Apps are downloaded and installed by using the Windows Store. Any apps that have been purchased, downloaded, and installed in the Windows Store can be updated only through the Microsoft Store. Viewing the settings within the Microsoft Store, there is an option to Automatically download updates for my apps Leaving this set to the default option of Yes allows the Microsoft Store to download updates. CIT 211 Chapter19: Updates

Updating Windows Store Apps Managing update options CIT 211 Chapter19: Updates

Updating Windows Store Apps Turning off app updates on Windows 8.1 CIT 211 Chapter19: Updates

Understanding WSUS Architecture CIT 211 Chapter19: Updates

Deploying WSUS 3.x Has been part of Windows server products since server 2003. WSUS software is a free download from Microsoft Web-based product, therefore the Web Server (IIS) role must be added to the server Requires a database – Windows Internal Database, or SQL Server for larger networks CIT 211 Chapter19: Updates

Deploying WSUS WSUS management consists of synchronization and approval of updates. WSUS is configured to regularly synchronize with either Microsoft Update or another WSUS server. The console can be used to approve updates for deployment to the client computers. Usually updates are approved after they have been tested. CIT 211 Chapter19: Updates

Configuring WSUS Clients Cannot be done in Windows Update program Configured through Group Policy CIT 211 Chapter19: Updates

Configuring WSUS Clients via gpedit.msc CIT 211 Chapter19: Updates

Lesson Summary You perform updates on a Windows 8.1 system to enhance, improve, secure, and protect end users from threats. It is important to keep a system up-to-date with the latest patches, service packs, and updates. You can configure automatic updates to require minimal user interaction during downloading and installation. You can configure the download, installation, timing, and user interaction of updates using local or domain Group Policy settings. CIT 211 Chapter19: Updates

Lesson Summary The update history lists recently installed updates, along with their statuses, dates of installation, and other more detailed information . If an updated is causing problems, you can easily roll back an installed Windows update to a previous version. Windows Store apps must be updated through the Windows Store. CIT 211 Chapter19: Updates

Lesson Summary Windows updates can be scheduled for installation to meet the needs of the end user, small business, or enterprise. Recently installed updates are listed along with a status, date of installation, and more detailed information of the updated and what it has affected. Windows Updates can be easily uninstalled or rolled back to a previous state if a recently installed update is causing problems. This can also be beneficial when troubleshooting a system instability after updates were recently installed. Windows Store Apps can be updated through the Windows Store. CIT 211 Chapter19: Updates

Errata page 450 Page 450 1. build a list makes no sense. Some of the links listed do not exist. Here is what it should be ___Give me updates for other Microsoft products when I update windows ___Open System and Security ___Click OK ___Open Windows Update ___Click Change settings ___Open Control Panel CIT 211 Chapter19: Updates

Errata page 451 Page 451 3. build a list makes no sense. Some of the links listed do not exist. Here is what it should be ___Open view installed updates ___Open Programs ___Open Programs & features ___Open Control Panel ___Select the update for uninstallation ___Right-click and select Uninstall. CIT 211 Chapter19: Updates

Assessment Week 12

When is Patch Tuesday? a. The second Tuesday of every month b. The third Tuesday of every month c. The first Tuesday of every quarter d. The second Tuesday of every quarter CIT 211 Chapter19: Updates

Answer a Explanation: The second Tuesday of every month, sometimes known as “Patch Tuesday,” is typically the release day for all tested and signed patches from Microsoft. CIT 211 Chapter19: Updates

By default, when will Windows install software updates? a. Daily at 1:00 AM b. Daily at 3:00 AM c. Sundays at 3:00 AM d. Saturdays at 1:00 AM CIT 211 Chapter19: Updates

Answer b Explanation: If no schedule is selected, updates will automatically be installed every day at 3:00 AM. CIT 211 Chapter19: Updates

What Group Policy setting removes or keeps in place the Install Updates and Shut Down option when shutting down the system? a. Do not display Install Updates and Shut Down option in Shut Down Windows dialog box b. Do not adjust default option to Install Updates and Shut Down in Shut Down Windows dialog box c. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates d. Configure Automatic Updates CIT 211 Chapter19: Updates

Answer a Explanation: The Do not display Install Updates and Shut Down option in Shut Down Windows dialog box policy removes, or keeps in place the Install Updates and Shut Down option when shutting down the system. Enabling this setting removes the dialog box. CIT 211 Chapter19: Updates

What Group Policy setting configures the day of the week to install updates? a. Automatic Updates detection frequency b. Do not adjust default option to Install Updates and Shut Down in Shut Down Windows dialog box c. Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates d. Configure Automatic Updates CIT 211 Chapter19: Updates

Answer d Explanation: The Configure Automatic Updates policy sets the method of downloading and installing Automatic Updates. You have the option to select the installation day of the week and the time of day. CIT 211 Chapter19: Updates

a. 22 days b. 22 weeks c. 22 minutes d. 22 hours When the Automatic Updates detection frequency policy is left undefined, what is the default interval at which Windows checks for new updates from the configured update server? a. 22 days b. 22 weeks c. 22 minutes d. 22 hours CIT 211 Chapter19: Updates

Answer d Explanation: When not configured, Windows will use the default interval of 22 hours. CIT 211 Chapter19: Updates

How do you update Window Store apps? a. Use the Control Panel Programs applet b. Use Windows Updates c. Use the Windows Store d. Use the Gpupdate command CIT 211 Chapter19: Updates

Answer c Explanation: The Windows Store is used to manage your apps, including updating the apps. CIT 211 Chapter19: Updates

How do you enable automatic updates for Windows Store apps? a. In the Store, tap Settings b. In the Store, tap Windows Updates c. In the Store, tap Scan settings d. In the Store, Update Now CIT 211 Chapter19: Updates

Answer a Explanation: App publishers sometimes update their apps to add new features and fix problems. The Windows Store can automatically install app updates when they become available. To make sure your apps get updated automatically, follow these steps: On the Start screen, tap or click Store to open the Windows Store. Swipe in from the right edge of the screen and then tap Settings. (If you're using a mouse, point to the lower-right corner of the screen, move the mouse pointer up, and then click Settings.) Tap or click App updates. Make sure Automatically update my apps is set to Yes. CIT 211 Chapter19: Updates

WSUS 3.x comes with Windows 8 True or False CIT 211 Chapter19: Updates

Answer False Explanation: WSUS is a server product and it supported in Windows 2003 server with SP1 and above. CIT 211 Chapter19: Updates

Homework Week#12 Read Chapter 19 Get our labs caught up 1-21 Next quiz Nov 26 and it will cover chapters 17 - 21 Do the knowledge assessment on page 448-451 CIT 211 Chapter19: Updates