Changes to Computer Patching

Software companies regularly release updates and patches to add features, fix bugs, and address vulnerabilities. Failure to install them leaves devices open to viruses and malicious software, which are designed to exploit weaknesses, steal data, and possibly produce system-wide compromises. For this reason, the University requires that all devices that connect to our network be kept up to date with current operating system and software updates and patches.

ITS pushes updates and patches to workstations using Microsoft System Center Configuration Manager (SCCM). This occurs between 3:00 am – 6:00 am on Mondays or Wednesdays. In order to be updated, however, the device must be turned on and connected to the UConn network, either on-campus or via remote access (i.e., Direct Access or VPN). Our logs indicate that an increasing number of laptops are not receiving critical patches, typically because they are off-site and disconnected during the scheduled patch windows. We are establishing an updated process for patching Windows computers. If the regular, early morning push of a critical patch is missed, we will issue a notification offering our customer the option of installing the update themself from Software Center at a time they find convenient. We will also set a deadline, after which the workstation will be forced into patch mode when it next connects to the UConn network. This, however, would not be the preferred experience because it is more likely to be disruptive. Starting next week, we will begin communicating with customers whose devices have missed the Win 10 22H2 cumulative upgrade.