...
LANDesk patches can be applied both to individual users and to broad groups. By using these features to patch computers in your group, you will ensure that vital software stays up-to-date. Below are two example workflows which outline the two main ways of administering patches. The first is a guide to targeted patches and the second is a guide to broad or group-wide patches.
Tufts University is currently automatically patching software for almost every computer with the LANDesk agent.
The following applications are being patched.
- Apple Quicktime
- Adobe Flash
- Adobe Reader
- Adobe Acrobat
- Adobe Air
- Adobe Shockwave Player
- Google Chrome
- Skype
- Filezilla Client
- Firefox
- WebEx Network Recording Player
- VLC
Documentation
Attachments | ||
---|---|---|
|
Attachments | ||
---|---|---|
|
Overview
The following workflow is recommended for keeping the most vulnerable and important software up-to-date. Detailed instructions follow but at a high level:
- Keep the most vulnerable applications up-to-date. This includes Adobe Reader, Adobe Acrobat, Adobe Flash Player, Adobe Shockwave, Adobe Air, Java and RealPlayer. These applications are known to be vulnerable to attacks so keeping them patched greatly decreases the risk of computers being infected.
- Important and high applications, like internet browsers (Firefox, Internet Explorer, Opera, Safari, Google Chrome) and operating systems (for example, Mac OS X and Windows 7) should also be kept up-to-date. Since they are common and frequently used, these types of applications are frequent targets for attacks.
General information: Queries and scopes are dynamic and will pick up new computers as they are added into the system. Dragging and dropping individual devices or using "My Devices" in a task is not dynamic and will only patch those computers or devices that you have selected.
Administering Targeted Patches
...
The patch may take some time to resolve; you can check back later to make sure the task resolved to "Successful."
Administering Scheduled or Group Patching
Group patches are useful when administering patches to your entire scope or a large section of your scope. Once you have set up a custom group, you can add patches from the "Scan" folder to it at any time. In addition, you can schedule a periodic deployment of patches to the group. This allows you to add patches to the group's folder at any time and have them deployed on a regular basis.
...
Info |
---|
The patch management best practices WebEx recording is available here. You will need WebEx player to watch it (available as package in Landesk) |