Windows updating best practice
For us, that's Google Chrome (more on that later), Chrome Remote Desktop, ESET Anti-Virus, Forticlient VPN, Parallels Client, and 8X8 Virtual Office.
Within Chrome, we only allow a few extensions — Chrome Remote Desktop, Last Pass, Adblock Plus — because browser extensions are also an attack vector. Even though I have my initial setup process for desktops and laptops down to a T, I still need to actually write it down.
Because the timely application of security updates is one of the most important and effective things you can do to protect your systems and network, your patch management system must be as efficient as possible.
To help customers develop and maintain efficient patch management strategies, Microsoft provides information about tools and strategies on our patch management page on the Tech Net Security site (
The other piece that lets me just use one installation image is how great Windows Update has become over the years.System Center Configuration Manager — or SCCM — is Microsoft's own suite for managing Windows deployments in an enterprise setting.Administrators can use SCCM to remotely control client machines, manage updates and patches and even manage i OS and Android devices.Therefore it is highly recommended to enable automatic updates or manually apply security patches as soon as possible to protect your server from well-known attacks.
Patch management is a critical part of maintaining the security of your systems and network.The patch management system that you build and maintain is, among other things, the channel through which you deploy security updates from Microsoft and other vendors.