Re: Auto-update versus "going green"

["Parker, Ron" <Ron.Parker () BRAZOSPORT EDU>]

That is what we do. We wake the machines up every Thursday night at 11:00 to install patches, updates, etc. It is a 
strange sight to be here late at night and see all the lab computers come on. We're using Deepfreeze in the labs so the 
routine disables it while the updates run. We've done this for many years and it has worked well for us.

--
Ron Parker, Director of Information Technology, Brazosport College
Voice: (979) 230-3480             FAX: (979) 230-3111
http://www.brazosport.edu



> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Valdis Kletnieks
> Sent: Friday, October 08, 2010 10:42 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] Auto-update versus "going green"
>
> On Fri, 08 Oct 2010 11:17:55 EDT, Jeff Kell said:
>
> > We are running into issues with our NAC policy enforcement with
> > machines that are set for some power-save / power-off profiles and
> consequently not auto-updating themselves.
> > When they are turned on for use, they are missing patches and
> > out-of-compliance, and can run into remediation/quarantine.
>
> This sounds like a job for 'wake-on-LAN' if your BIOS and network card
> support it.  Poke each machine at oh-dark-thirty, have it wake up, look for
> updates, and go back to sleep.