Educause Security Discussion mailing list archives

Auto-update versus "going green"


From: Jeff Kell <jeff-kell () UTC EDU>
Date: Fri, 8 Oct 2010 11:17:55 -0400

 I'm curious how others are setting up computers (especially labs, university-owned
office computers, etc) for auto-updates while keeping a "going green" (powersave /
poweroff) policy.

We are running into issues with our NAC policy enforcement with machines that are set
for some power-save / power-off profiles and consequently not auto-updating themselves. 
When they are turned on for use, they are missing patches and out-of-compliance, and can
run into remediation/quarantine.

Have also had issues with Deep Freeze... some areas have successfully co-ordinated a
"thaw/update" cycle at a scheduled time and behave well, while others are not so lucky.

Since I don't personally maintain these resources, I often get the "erroneous cases"
reported second- and third-hand, and it is hard to tell exactly what is going wrong with
the plan.

Jeff


Current thread: