How to deploy missing Microsoft updates Automatically

How to deploy Microsoft updates Automatically

With GFI LANguard schedule and remediation, you can install Microsoft updates on any networking computers automatically at the end of scheduled scans. To deploy missing Microsoft updates automatically, please follow these steps:

1. Run GFI LANguard.

2. Click Configuration and click on Patch Auto-Deployment under Microsoft Updates in the left pan.

3. By default no Microsoft updates are enabled for automatic deployment. It is highly recommended that every patch should be tested in a test environment before deploying it into the life environment. You can approve each patch manually or setup an email receiving the notifications from Microsoft update. To configure patch approval for auto remediation, click on Advanced options in the left pan.

4. In the Advanced options window, you have 3 options: Send mail when new patches or service packs are available, Automatically approve patches and Automatically approve all services packs.

5. After configuring advanced options, in the Patch Auto-Development window, click Manage applicable scheduled scans. If you already have a scheduled scan, you will see it in the Manage applicable schedule scans. Otherwise, you may create a new one by clicking on Create a new scheduled scan.

6. In the Define target type, select the scan type and give scan job description. In our example, we will scan entire domain network. Type the scan job description if you want.

7. In the Define target computers, select the target computers or domain/workgroup. Note: If you select scan entire domain or multiple computers make sure you have privileges in all selected computers. Click Next to continue.

8. In the Set the triggering time, select the day and time we want to start the job. It is recommended to uncheck Wait for offline machines to connect to the network. Otherwise, it will take long time to process. If you would like to scan just a a few computers, you may check this feature. Click Next to continue.

9. In the Select scan profile, select Vulnerable assessment in the Scan job operation and Missing Patches in the Select scan profile. Click Next to continue.

10. In the Remote logon credentials, keep the default settings which is GFI LANguard 9.0 Attendant Service account. If you are scanning Unix or Linux, you may select SSH Private key. Note: the scan profile is preset and can be modified. Click on Next to continue.

11. In the Specify auto-remediation options, you can select Automatically download and deploy missing patches and Automatically download and deploy missing service packs. Note: it is recommended to have System Restore enabled and/or backup the system before process any installations. Click on Next to continue.

12. After creating the scheduled scan, the scan job displays in the Manage applicable schedule scans window. The scheduled scan will download and install missing Microsoft patches if the scan find any missing patches.

Post your questions, comments, feedbacks and suggestions

Contact a consultant

How to install GFI WebMonitor on Microsoft ISA
How to manage and install Microsoft security patches with GFI LANguard
How to scan your network for security vulnerabilities with GFI LANguard
Installing GFI MailEssentials
Spam are not being moved to the users’ junk mail folder
Understand Reverse DNS check
Why doesn't GFI Bayesian block any spam