I primarily work as a software developer at my company. Recently, we had a new department created called CyberSecurity. They have implemented a responsibility that all developer is responsible to keep the test, staging, and production server patched and up to date + install any fixes recommended by an automated report they generate.

This task has now started to affect my working hours severely. Some regular updates are pushed to Windows update on servers but the update recommended in the security report is not part of them. They have selected vulnerabilities that may be recommended for one Win 2008 server but not for the other.

I need some way to help myself in this regards. Ideally, I was thinking If I can create a server-wise excel file with all KBs required to be installed from the report. Then, for each server, execute a script of a tool if already exist to attempt to install those KBs (download, if needed).

I'm not a server admin. This is new to me. Any automation or management help/pointers will be greatly appreciated.

  • 1
    I won't delve into how awesomely stupid I think this idea ist (theirs, not yours), but to try to help you we need more information. Do you get Windows updates from some server which preselects them? Or from the MS update servers? This should really be handled by either "CyberSecurity" (sic) themselves or you should be given the correct tools (like SCCM, WSUS, or some other automation / patching tool). There is some stuff you could try like docs.microsoft.com/en-us/windows/desktop/wua_sdk/… – Lenniey Dec 14 '18 at 8:08
  • "It's now the responsibility of the customer to make sure the bank doesn't get robbed." - Yes, this is an awesomely stupid idea. – joeqwerty Dec 14 '18 at 13:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.