...
- Adobe AIR
- Adobe Acrobat and Adobe Reader
- Adobe Flash Player
- Adobe Shockwave Player
- Some Adobe CS3-CS6 patches
- Citrix Receiver
- Google Chrome (Windows)
- Apple iTunes and QuickTime (Windows)
- Apple Safari web browser (Windows)
- Microsoft Silverlight and Remote Desktop (Mac)
- Microsoft Office (Mac)
- Mozilla Firefox and Firefox ESR
- Oracle Java
- VLC media player
- VMWare Fusion, Player, Workstation
- WinZip and 7-Zip (Windows)
When are patches delivered?
When software vendors release patches, Lumension and KACE test them before making them available to the KBOX. This provides more levels of review to catch any potential problems. The KBOX downloads new patch signatures and patch package files for the operating systems we have selected nightly. Then, Carleton computers use the available patches based on the patching schedule to which each computer is assigned. Some patch schedules check for ("detect") patches at one time, and then apply ("deploy") the detected patches at a different later time. Other patch schedules check for ("detect") patches and then apply them ("deploy") immediately thereafter.
There are 10 different patch schedules to which a computer can be assigned. Each computer, virtual machine (VM), and booting operating system (e.g., dual boot), should be assigned to one and only one patch schedule. Any VM or booting operating system on a computer should be assigned to a different schedule than the computer itself, so you can make sure the correct environment is running at the time of each schedule.
| Panel |
|---|
| Note: We have found it is very difficult to explain these different patch schedules in writing, so please be patient in reviewing this section, and please call the |
...
| ITS Helpdesk at x5999 when you have questions. |
Here is a list of the different patch schedules each in a different color, and below that is a picture of when the different parts (detect or deploy) of each patch schedule runs:
Which patch schedule should I
...
choose?
It depends on when the computer (or VM or booting operating system) is active and on the campus network, and whether you want patching to compete with your trying to get other work done. In general, if you don't want to be interrupted, choose an "End of Day" or Overnight schedule, and leave your computer on and on the campus network. If you take your laptop computer home most nights, choose instead a schedule that runs during the day at a time when you may be away from your desk (e.g., Convo). If your laptop computer is seldom on campus at all, choose the Next Check In schedule which will try to run every time you are on the cmapus network.
Carleton computers are set to check for patches on one of the following schedules:
campus network if you miss the scheduled times.
How do I tell if my machine is on a patching schedule?
...
KBOX patch management should not reinstall patches that are already applied, nor should it downgrade your softwareapplications.
Manual Updates Within Applications
Most applications on campus computers have automatic update checking turned off. Users with the proper privileges can update their software manually, or re-enable automatic update checking.
...