What's the downside risk of these computers receiving updates? They stop working and someone brings them back to you to fix? As opposed to the hey, you're supposed to bring your machine in to get updates. In an environment where I have to ensure updates get to computers, I'd forgo vetting in favor of getting updates on the computer. I believe in testing, but in this case, testing seems to be leaving you much more vulnerable than necessary.
On Fri, Feb 18, 2011 at 2:25 PM, John Hornbuckle < [email protected]> wrote: > Yeah, but I don’t want any updates being installed on machines until I’ve > vetted them. > > > > > > > > *From:* Crawford, Scott [mailto:[email protected]] > *Sent:* Friday, February 18, 2011 2:01 PM > > *To:* NT System Admin Issues > *Subject:* RE: How do you deploy AV? > > > > If you’re disconnected from the LAN, you’ll still get updates direct from > MS over the internet. > > > > Note the “Check for updates on Microsoft Update when WSUS is unavailable” > option on the Advanced tab of the policy editor. > > > > *From:* John Hornbuckle [mailto:[email protected]] > *Sent:* Friday, February 18, 2011 12:52 PM > *To:* NT System Admin Issues > *Subject:* RE: How do you deploy AV? > > > > Yep. > > > > WSUS can be configured to synchronize as often as once per hour. > > > > If the machine is off the network, it won’t get malware definition updates. > But neither will it get potentially critical OS or app updates, either. > > > > > > John > > > > > > > > *From:* Paul Hutchings [mailto:[email protected]] > *Sent:* Friday, February 18, 2011 1:00 PM > *To:* NT System Admin Issues > *Subject:* RE: How do you deploy AV? > > > > Doesn’t that mean you’re limited to clients only pulling down definitions > when connected to the LAN and when their Group Policy for WSUS tells them > (and when the WSUS server synchronises)? > > *From:* John Hornbuckle [mailto:[email protected]] > *Sent:* 18 February 2011 14:06 > *To:* NT System Admin Issues > *Subject:* RE: How do you deploy AV? > > > > We use Microsoft’s Forefront Client Security. It’s pushed down and updated > via WSUS. No muss, no fuss. > > > > > > > > John Hornbuckle > > MIS Department > > Taylor County School District > > www.taylor.k12.fl.us > > > > > > > > On Thu, Feb 17, 2011 at 11:39 AM, David Lum <[email protected]> wrote: > > What methods do you guys use to deploy AV to systems and what process do > you > > follow to make sure your live endpoints are compliant? > > > > David Lum // SYSTEMS ENGINEER > > NORTHWEST EVALUATION ASSOCIATION > > (Desk) 503.548.5229 // (Cell) 503.267.9764 > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > > > > NOTICE: Florida has a broad public records law. Most written communications > to or from this entity are public records that will be disclosed to the > public and the media upon request. E-mail communications may be subject to > public disclosure. > > ------------------------------ > > *MIRA Ltd* > > > > Watling Street, Nuneaton, Warwickshire, CV10 0TU, England > > Registered in England and Wales No. 402570 > > VAT Registration GB 100 1464 84 > > > > The contents of this e-mail are confidential and are solely for the use of > the intended recipient. If you receive this e-mail in error, please delete > it and notify us either by e-mail, telephone or fax. You should not copy, > forward or otherwise disclose the content of the e-mail as this is > prohibited. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > > > > > NOTICE: Florida has a broad public records law. Most written communications > to or from this entity are public records that will be disclosed to the > public and the media upon request. E-mail communications may be subject to > public disclosure. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > NOTICE: Florida has a broad public records law. Most written communications > to or from this entity are public records that will be disclosed to the > public and the media upon request. E-mail communications may be subject to > public disclosure. > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
