1.7.4 Manually registering and distributing an update
If an urgent update that must be immediately applied to computers in your organization is released, you need to manually register such an update before distributing and applying it.
- Tip
-
JP1/IT Desktop Management 2 can automatically distribute and apply updates released by Microsoft to computers according to a security policy. However, it takes about 10 working days after release of updates for JP1/IT Desktop Management 2 to be able to automatically distribute the updates whose information is registered in the support service site.
To manually distribute an update:
- 1. Prepare an update to be distributed.
-
Download an update to be distributed from Microsoft's Web site. Then, when registering information about the update in JP1/IT Desktop Management 2, create an update file. If you have set the configuration in such a way as to apply only specific updates, add the update to the update group.
- 2. Check the application status of the update.
-
Check the application status of the update. If you find a problem, identify the cause and take necessary measures.
- Organization of this subsection
(1) General procedure for preparing an update to be distributed
Download the executable file of an update to be distributed. In addition, register the information about the update in JP1/IT Desktop Management 2 to register the update file.
- 1. Download the executable file of an update to be distributed.
-
If you manually register and distribute an update, download the executable file of the update to be distributed from Microsoft's Web site in advance.
- Tip
-
To check information about updates, from the top page of Microsoft's Web site, move to the security page (Security Home), and then click the link to the target update.
- 2. Register the information about the update and the update file.
-
In the Update List view of the Security module, register the information about the update to be distributed and the update file. By registering the information about the update, you can check the application status of the update after distributing the update. By registering the update file, you can register data for distributing the update to the users' computers.
- Important
-
There are multiple types of command to be executed when updates are distributed. Check the detailed information of updates in Microsoft's Web site to select the appropriate command for individual updates.
- Tip
-
If you have set the configuration in such a way as to apply only specific updates, add the update to the update group. According to the automatic enforcement settings in the security policy to which the update group is set, the update is applied to the target computers.
Related Topics:
(2) General procedure for checking the application status of updates
Using the Windows Update tab in the Security Policy List view of the Security module, you can check whether there is any problem with the application status of updates.
After checking the device security status, if you find that the violation level is Safe, there is no problem. However, if the violation level is Important or Critical, some updates might not have been applied. Keep track of the status and take necessary measures as follows:
- 1. Keep track of the application status of updates.
-
In the Security Policy List view, you can only check whether a problem exists. Therefore, to check the application of which update has a problem, display the Windows Update Installation Status report in Security Detail Reports. In this report, you can identify the update that has not been applied to computers.
- 2. Check for the cause of non-application.
-
After checking the report, if you find that some update has not been applied to computers, distribution of that update might have failed. In the Task List view of the Distribution (ITDM-compatible) module, select the task whose type is Policy Based Task(Windows Update), and then check the status of the computer to which the update was not distributed. By checking the details of the task status at this time, you can check the cause of distribution failure.
- 3. Take measures against the non-application of the update.
-
You can redistribute the update to the computers to which the update has not been applied.
In the Security Policy List view of the Security module, select the Windows Update tab, and under Action, click the Distribute Windows Update (ITDM-compatible distribution) button. The update is redistributed to the computers to which that update has not been applied.
- Tip
-
You can also redistribute an update by using the Enforce button in the Computer Security Status view.
You have now finished checking the application status of the update and taken necessary measures. If there are multiple updates that have not been applied, repeat this procedure to take necessary measures.
- Tip
-
You can also check the distribution status of updates by using the task execution result. If an update distribution failed, check the task status in details to correct the cause. Check the status of update application to computers by using the Not Applied Computers tab in the Security Policy List view of the Security module.