Desktop Security Management
Security While You Sleep: Overnight Updates
The first phase of “Security While You Sleep” was released to desktops in January 2019. When this initiative is completely implemented, it will allow IT to execute necessary computer tasks in the early morning hours (3 a.m. to 6 a.m.) with minimal disruptions. This program will power your computer on if it’s off to perform KBOX updates, Windows quality and feature updates, anti-virus scans, anti-malware scans and Windows health checks, which will keep your computer secure.
In order for this process to work as intended, we remind everyone never to leave your computer logged in before leaving for the day. You should restart on a regular basis to maintain system stability. If you leave your computer on when you leave for the day, it will restart and be on when you arrive in the morning. If you power your computer off at the end of the day, your computer will power off before you arrive in the morning.
What can you expect?
We plan to power your computer on at 3 a.m. and then power it off at 6 a.m. This is the first step in identifying if certain computers may not be able to perform scheduled tasks.
Next, we will add the process of applying security updates between 3 a.m. and 6 a.m. This will eliminate the need for the orange KBOX alert. If everything goes as expected, we will begin applying Windows Feature Updates as well.
I have a laptop. Will I get these updates?
It is important that all computers receive these updates. Unfortunately, at this time, we are unable to perform these on your laptop if you take it home. Only if you leave your laptop on campus and docked, will it run through all of the actions listed above. We will be reviewing laptop solutions once the desktop implementation is complete.
CyberArk
Please be aware that attempting to install applications or printers or attempting to change some settings will require administrative privileges. CyberArk will prompt you to enter a business justification and will either elevate your privileges automatically or forward your request for approval to the CyberArk console.
KBOX
In addition to CyberArk, we have been using KBOX for a number of years to manage third party programs on your computer. The management of these programs has reduced your computer’s vulnerability to viruses and malicious attacks. This program has been able to help us secure your computer and, most importantly, the sensitive data you use on a daily basis. KBOX is designed and leveraged to update vulnerable programs automatically.