Information Security Office Compliance

https://security.utexas.edu/content/min-security-standards | Systems > Minimum Standards > 4.5. System Hardening > 4.5.2

"Operating system and application services security patches are installed expediently (e.g., 30-days) and in a manner consistent with change management procedures. Products that no longer receive security updates from the vendor (e.g., unsupported) are not authorized."

Follow the steps below to install all available updates for your version of Windows

Follow the steps under each section below to ensure your computer is up to date on all available security and feature updates for Windows.

Note: only computers enrolled in Windows Endpoint Management will have Software Center.

First, use Windows Update Assistant

Use Windows Update Assistant to make sure your computer is running the most up-to-date version of Windows:

NOTE: Administrative access is required. For more information about admin access on managed Windows computers, see the section Administrative Access on our Windows EPM page.

In a web browser, go to:
1. For Windows 10: https://www.microsoft.com/en-us/software-download/windows10
2. For Windows 11: https://www.microsoft.com/en-us/software-download/windows11
Click "Update Now" to download the installer. Then, open the installer.
When prompted, enter your admin username and password.
1. For more information about admin access on managed Windows computers, see the section Administrative Access on our Windows EPM page.
Follow the prompts to begin the update. You can continue to use your computer and Update Assistant will run in the background.
1. If you receive a message saying "Thank you for updating to the latest version of Windows", click Close and continue to the next section, "Using Software Center".
When the update completes, you'll receive a notice that the computer will reboot in 30 minutes. Restart your computer and continue to the next section.

Second, use Software Center

To check for and install updates using the Software Center application on managed computers:

If you can't find Software Center on your computer, continue to the next section "Using Windows Update".

See the Updates section of the Software Center page from the campus EPM wiki, included below:

Table of Contents

Opening Software Center
Related Information

Software Center provides users an easy way to install applications and generally without the need for an administrative login. The list of applications can vary due to many factors that could range from licensing to hardware requirements to what is offered by your IT Support Organization.

Opening Software Center

Software Center is available on managed Windows devices that have the Configuration Manager client.

The simplest method to find Software Center, is to click on the Start button and type in Software Center. Click on Software Center to open the application.

Software Center best match in Start menu

Applications

Note: Applications that have already been installed using the Software Center will not listed here but rather can be found under Installation Status. The cosmetics and application list may vary by CSU.

Select the Applications tab (1) to find and install applications that have been approved and added to Software Center.

All (2): Shows all available applications that you can install.
Required (3): If you uninstall one of these applications, Software Center reinstalls it as they are required.
Filters (4): You may see categories of applications. If available, select the drop-down list to filter the view to only those applications in a specific category. Select All to show all applications.
Sort by (5): Rearrange the list of applications. By default this list sorts by Most recent. Recently available applications display with a New banner that's visible for seven days.
Search (6): Still can't find what you're looking for? Enter keywords in the Search box to find it!
Switch the view (7): Select the icons to switch the view between list view and tile view. By default the applications list shows as graphic tiles.

APPLICATIONS

Icon	View	Description
	Multi-select mode	Install more than one application at a time. For more information, see Install multiple applications.
	List view	This view displays the application icon, name, publisher, version, and status.
	Tile view	Your IT admin can customize the icons. Below each tile displays the application name, publisher, and version.

Install an application

Select an application from the list to see more information about it. Select Install to install it. If an app is already installed, you may have the option to Uninstall.

Some apps may require approval before they install. Currently none do but if approval is needed, this is what you can expect.

When you try to install it, you can enter a comment and then Request the app.
Software Center shows the request history, and you can cancel the request.
When an administrator approves your request, you can install the app. If you wait, Software Center automatically installs the app during your non-business hours.

Installing multiple applications

You can install more than one application at a time instead of waiting for each one to finish before selecting the next one.
To select multiple applications:

The application must not be downloading or installing.
The application does not require admin approval.

To install more than one application at a time:

Select the multi-select icon in the upper right corner:
Select the checkbox to the left of each app in the list.
Select the Install Selected button to start.

The apps install as normal, only now in succession.

Share an application

Share a link to a specific app with someone. After you select the app in Software Center, select the Share icon in the upper right corner:

Share an app from Software Center

Copy the link, and paste it elsewhere, such as an email message or in Teams. Anyone else in your CSU with access to Software Center can use the link you sent them.

Updates

Select the Updates tab (1) to view and install software updates that are needed for this computer.

All (2): Shows all updates that you can install.
Required (3): Your ITSO enforces these updates.
Sort by (4): Rearrange the list of updates. By default, this list sorts by Application name: A to Z.
Search (5): Still can't find what you're looking for. Enter keywords in the Search box to find it.

To install updates, select Install All (6).

To only install specific updates, select the icon to enter multi-select mode (7): Check the updates to install, and then select Install Selected.

Installation status

Select the Installation status tab to view the status of applications. You may see the following states:

Installed: Software Center already installed this application on this computer.
Downloading: Software Center is downloading the software to install on this computer.
Failed: Software Center wasn't able to install the software.
Scheduled to install after: Shows the date and time of the device's next maintenance window to install upcoming software. Maintenance windows are defined by your IT admin.
- The status can be seen in the All and the Upcoming tab.
- You can install before the maintenance window time by selecting the Install Now button.

Device compliance

Select the Device compliance tab to view the compliance status of this computer.

Select Check compliance to evaluate this device's settings against the security policies defined by your IT admin.

Options

Select the Options tab to view additional settings for this computer.

Work information

Indicate the hours that you typically work. Your ITSO may schedule software installations outside your business hours. Allow at least four hours each day for system maintenance tasks. Your IT admin can still install critical applications and software updates during business hours.

Select the earliest and latest hours that you use this computer. By default, these values are from 8:00 AM through 5:00 PM.
Select the days of the week that you typically use this computer. By default, Software Center only selects the weekdays.

Specify whether you regularly use this computer to do your work. Your administrator might automatically install applications or make additional applications available to primary computers. If the computer you're using is a primary computer, select I regularly use this computer to do my work.

Power management

Your ITSO may set specific power management policies. These policies help your organization conserve electricity when this computer isn't in use.

To make this computer exempt from these policies, select Do not apply power settings from my IT department to this computer. By default, this setting is disabled, and the computer applies power settings.

Computer maintenance

Specify how Software Center applies changes to software before the deadline.

Automatically install or uninstall required software and restart the computer only outside of the specified business hours: This setting is disabled by default.
Suspend Software Center activities when my computer is in presentation mode: This setting is enabled by default.

When instructed by your ITSO, select Sync Policy. This computer checks with the servers for anything new, such as applications, software updates, or operating systems.

Related Information

Page:
Third Party Application Updates (Endpoint Management)
- configmgr
- ux
Page:
ConfigMan Community Practices (Endpoint Management)
- configmgr
- ux
Page:
CM Template (Endpoint Management)
- configmgr
- ux
Page:
CM Template 2 (Endpoint Management)
- configmgr
- ux
Page:
Software Center (Endpoint Management)
- configmgr
- ux
Page:
Departmental Custom EA Workflows (Endpoint Management)
Page:
Jamf Application Patching End User Experiences (Endpoint Management)
Page:
MECM End User Experiences (Endpoint Management)
- configmgr
- ux
Page:
Jamf Connect Community Best Practices (Endpoint Management)
Page:
Updating EA's via API Workflow (Endpoint Management)

Search UT EPM Documentation

Service Links

Get Help

EPM is available to IT Support Organizations (ITSOs) with any endpoint management questions. If you have a question about a specific endpoint client, please reach out to your local endpoint client support organization.

SERVICE STATUS

Planned Maintenance

ConfigMgr: Every Tuesday, from 6 a.m. – 10 a.m.
Jamf: Every Tuesday, from 8 a.m. – 12 p.m.
Jamf Server Upgrades: Wednesday 12 am - 3 am

Section Content

Third, check Windows Update

To check for and install Microsoft updates through Windows Update:

Begin by clicking on the Start Menu, search for Updates, then click Check for updates in System Settings

Press Check online for updates from Microsoft Update if you have the option. If not, click Check for updates.

Windows should begin to download and install available updates.

Once updates are installed, a restart will most likely be required to apply the updates. Computers in this state are considered Non-Compliant by the Information Security Office's requirements, so please reboot as soon as possible.

Once all updates are installed and all pending reboots are performed, pressing Check for Updates should confirm that your system is up-to-date.

Need assistance or have questions?

Submit a help request, send an email to help@cns.utexas.edu, or call 512-232-1077

Browser not supported