Versions Compared

Old Version 9

changes.mady.by.user user-29411

Saved on

compared with

New Version 10

changes.mady.by.user user-29411

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

IT-fully-managedcomputerOnly used forstems which can not rebooted after .
Support typeSummaryNotesDetails
Self-supported computerA computer not set-up by Chemistry IT.It cannot be on CUAD so it cannot be managed using Cornell's tools.

System's network will be through eduroam (CIT's wireless network), AccessNet (CIT's wired network), or RedNet (Chemistry's nonIT-managed network).

  • System will not be on Chemistry's IT-managed networks.
 
IT-supported computerA computer set-up and configured by Chemistry IT.It's on CUAD. Thus, may or may not be IT-managed. 
IT-partially-managed computerAn IT-supported computer also partially managed using Cornell's management tools to degree permitted by the Group.Group assumes more responsibility. Default set-up. An IT-supported computer managed using Cornell's management tools, including Cornell-managed OS patching.

For systems which cannot be forced rebooted if

multiple days of warnings

 

 

...

are ignored.

Group assumes more responsibility by having to restart system, with updates, manually.

Group pledges to patch/ restart system once per month.

  • If that's not happening or not possible, how best detect or document that situation?

Depending on Microsoft Windows Updates

...

configuration, group member may also need to initiate, and see through completion, OS patching

...

. Windows can be set to:

  • No patching automation.
  • Download Microsoft patches.
  • Default: Download patches and install what it can without any reboot.
  • Download patches, install them, including reboots.

Note that reboots may be required to enable subsequent patches to download and install, which in turn may require more reboots. The longer one waits, the more reboots are likely required to fully patch the system

...

.

IT-fully-managedcomputer

...

Default

...

set-up. An IT-supported computer

...

managed using Cornell's management tools, including Cornell-managed OS patching.

...

Only used for systems which can be forced rebooted.

Forced rebooting only occurs if system is not rebooted by user after multiple days of warnings

...

about once per month

...

.

 

 

Patching behavior

Service nameWindows OS patchedForced reboot?When?Common MS apps patchedCommon non-MS apps patched
A&S Central PatchingYesYes

Thursday, 4pm, once per month.

This Thursday is following Tuesday patch deployment by A&S IT, which is the Tuesday a week after "MS Patch Tuesday", which itself is once per month (2nd Tuesday of the month?). Except when MS skips or retracts patches in time.

Yes. List?Some. List?
Researchers' needs:YesNoWhen research group can, hopefully sooner than later.Yes. List?(Same as above)

...