We also use WSUS and Group Policy. Once it is set up, approving or declining updates isn't a big deal. Not compared to the time you would spend if you physically had to go and touch every machine. I think that just "trusting" that your end users to apply the updates wouldn't give you the oversight as to whether or not patches were being applied as desired. With WSUS you have the option to verify which machines are compliant and which are lacking updates. Then, if you have to physically go to one or two machines that are having issues, at least the other 99% are fully patched to your specifications. Also, if you have certain computers that run mission critical apps, you would be able to create a special schedule to apply updates to these machines. Then, your everyday use PC's are patched and running without any risk of security exploits and all of the other stuff that Microsoft says could happen if you don't update. JMO...
Chris Koenck Network Specialist Head Wrestling & Boys' Tennis Coach Estherville Lincoln Central CSD 712-362-8404-office 712-380-2337-cell -----Original Message----- From: Mueller, Mitch [mailto:mmuel...@emmetsburg.k12.ia.us] Sent: Wednesday, February 11, 2009 12:30 PM To: info-tech@aea8.k12.ia.us Subject: [info-tech] Updating Computers How do you guys keep your computers up to date. Teacher computers and student computers. I sent out instructions how to specifically how to up date your computers but our principal does not want them to do it.. Please give me advice on what you do because for me to go around and manually do it myself every time windows releases updates would take all my time. Thanks Mitch Mueller
