Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel
borderColorred
titleNot KBOX Patch Management?

Around the beginning of August 2014, all college-owned computers will be migrated from the old K1000 5.4 to the new K1000 version 5.5, possibly receiving a newer version of the Dell KACE Agent. For a few months, Windows computers on a KBOX patching patch schedule will receive application patches from a different K1000 process, one based on Managed Installations, not on KBOX patching. This does not affect computers running Mac OS X, only Windows.

What you see during patching will look different, and may work a bit differently than before, but it will run at exactly the same time as the patching patch schedule you subscribed to (the deploy step). ITS plans to have a better solution in place by the end of the calendar year, if Dell KACE fixes some bugs.

...

When software vendors release patches, Lumension and KACE test them before making them available to the KBOX. This provides more levels of review to catch any potential problems. The KBOX downloads new patch signatures and patch package files for selected operating systems nightly. Then, Carleton computers use the available patches based on the patching patch schedule to which each computer is assigned. Some patch schedules check for ("detect") patches at one time, and then apply ("deploy") the detected patches at a different later time. Other patch schedules check for ("detect") patches and then apply them ("deploy") immediately thereafter.

...

A note about the NOJava schedules: The patch schedules whose names contain the phrase NOJava exclude any Java Runtime Engine (JRE) updates, because a few third-party applications run correctly only when their preferred version of Java is not changed. Only if you have such an application should you choose a NOJava schedule, and in those cases, you can enhance your computer security by disabling Java in Web browsers: Look for a Java Control Panel with a Security tab and a setting titled "Enabled Java content in the browser" that you can uncheck. If doing this causes the application Web site to fail, just reverse your actions.

How do I tell if my machine is on a

...

patch schedule?

  1. Visit the KBOX user portal in your web browser
  2. Log in with your Carleton username and password
  3. Click the My Computer tab
  4. Scroll down the page to the Activities section
  5. Click on the Labels link
  6. If you have a Label beginning with PatchSelf, your machine is on a patching patch schedule
    1. Note: If you have a VM, multiple Operating Systems, or multiple computers, you'll need to repeat this process from each VM/OS/computer

How do I join a KBOX

...

patch schedule?

  1. Visit the KBOX user portal in your web browser
  2. Log in with your Carleton username and password
  3. Click the Software Library tab
  4. In the Search field, type Patch and click Search, or scroll down the page until you see the entries beginning with Patch Schedule: 
  5. Click on the desired Patch Schedule. (If the Patch Schedule you want does not appear in the list, contact the ITS HelpDesk x5999.)
  6. Read the Installation Instructions and click Install Now
    1. Note: If you have a VM, multiple Operating Systems, or multiple computers, you'll need to repeat this process from each VM/OS/computer

...