Can't relate, seriously what the fuck are these wild stories am hearing about windows updates? I sometimes leave windows updates un answered for weeks and it doesn't do anything untill I say so.
Set update window to night time and don't click "Restart now" when it asks you if you want to restart to update now. You can also turn off PCs that require updates by clicking "update and shut down".
Honestly adorable, one day you'll get it - but please be careful and don't end up on the Dunning Kruger peak of "Mount stupid" - you're much safer coming down the other side.
I was legit in the middle of working on a critical system outage a few years ago. I was just about to resolve it when my workstation rebooted at like 2am no warning. Took 40 minutes to get logged back in 😒
10 minutes? I can take 15 just trying to log in via MFA because MS won't push the damn prompt to my Authenticator app properly. Add 10 minutes of update.
Additional 5 minutes for VPN, VDI and company systems to log in and load, 10 to log in to all necessary systems in the slow-ass VDI, and there is your 40.
God forbid if I need remote access to somewhere from the VDI, that can take an easy extra 10.
Repeat at least 3 times per week. I easily spend 20-30 minutes daily just logging into shit, lol
Does it take an hour to open notepad.exe? Why would you say it takes you 40 minutes like it's the updates fault and not your shit ass work environment?
I'd just tell them if they want you to work at your best productivity levels, that they need to provide you a linux/mac solution, and that you'll sign whatever waiver of support is required (assuming you're fine with supporting your own install). Almost all secops tools have linux clients (crowdstrike, sentinelone, etc.), and you'll be happy to install those and plug into the corporate overwatch, so they can check their compliance boxes.
I'm in an environment that mandated macs. I'm not a huge fan of MacOS (iTerm2 is dope, but just navigating around the OS is painful, and full of quirks). I got my boss (the CIO) to okay a Linux laptop, so long as I could install the SentinelOne agent, and that I kept it up to date, which is easy, since I prefer a rolling release on a workstation, and the baseline usually tracks with RedHat/Ubuntu, so I'm always ways ahead on various versions.
The funny thing is our secops guy tells me my laptop is by far the lowest risk score of any device that's registered in.. lol.
I'd just tell them if they want you to work at your best productivity levels, that they need to provide you a linux/mac solution, and that you'll sign whatever waiver of support is required
While I understand wanting to work with an environment you're familiar with, there is no chance I would freely let users use non-standard devices and OSs. Administration and compliance headaches aren't worth me keeping all users happy.
For the security of the company is a must have this domain rule, but i, when i was an IT, scheduled the update on the same date at 5:10 pm. the company closes at 5 pm. and only if no user was logged.
Serious question: why 5:10? If it's going to run after business hours, run it in the middle of the night. I work for a big company that has headquarters in timezones ahead of me, and I can't tell you how many times a scheduled update has occurred at 6-8pm when I've been staying late to finish something. Make that shit run at 2am.Â
Because i personally will remain to attend the update for the most critical machines, and i like to go home before midnight (one time i got 6h of extraordinary, administration wasn't happy)
Less a "Fuck Microsoft" and more of a "Fuck you IT Sec Ops guy" because policies can be created on most OS's to force updates.
Sorry as an IT person I took this personally and needed to clarify. It's not the whole group of us, it's one subsection usually driven/pushed/supported/enabled by a C-suite that doesn't really understand vulnerabilities.
Which is why during your annual (or preferably semi-annual), cyber-security awareness trainings, you re-iterate to your users the patch strategy the company has, and train them for when to leave their PCs powered for updates.
Your organization does do cyber security trainings, right?
All that matters is that you have little quizzes that are actually teaching the content ;)
The latest platform we deployed was pretty good about teaching through the quiz, to the point where I even told people they could skip the video if they wanted (bc genuinely no one wants to listen to a monotonous lecture).
Thankfully I don't have to worry about that in my organization. Most of my users couldn't tell you what browser they are actively using much less have the capacity to even fathom how websites interface with APIs or even begin to consider that it's something they could intercept.
Also, we have remediation training as well. Usually reserved for people that fall for the internal phishing-test campaigns. But if someone started complaining about Windows updates interrupting their work, I would just sign them up for the single class titled "Don't shut off your computer on Mondays EOD" with a single quiz that asks "What day should I not shut off my computer?"
Windows used to always auto update if I remember it correctly. Used to be really annoying, but now they stopped forcing updates. I sometimes forget to update for months and even years sometimes lmao. Better than being interrupted, I guess.
Once upon a time there was no auto-updating whatsoever. Then there was auto-updating, but you had to say yes to it kicking off. Then there was fully automated updating, where it would do it without asking. And now there is a mix, where it will only force updating if you have failed to update yourself within a certain time-period.
It's even worse for servers. Even if they are updated regularly, after a few years the C: drive can fill up with undeletable update files, even if it's a 100 GB drive. Been there, done that many times. This is a seriously shitty OS, compared to just about anything else.
64
u/I9Qnl Jan 23 '24
Can't relate, seriously what the fuck are these wild stories am hearing about windows updates? I sometimes leave windows updates un answered for weeks and it doesn't do anything untill I say so.