Automating Microsoft Windows Updates
UM security
If you are responsible for a computer that is connected to the University's network, you must update your system as soon as critical security updates are available.
To safeguard the integrity of University of Minnesota computers, networks, and data and their availability for appropriate educational and business activities, OIT is offering a new, automated Software Update Service (also known as SUS) that will help many Microsoft Windows users.
Who should use this Software Update Service?
The primary audience for OIT's new service is those who use the personal computers and workstations listed below. Since Microsoft's update sites frequently become very busy when critical updates are released, this service will make installing updates quicker and easier than before. Wireless and modem users who are usually connected for less than 30 minutes may not benefit from using this service; see the "Update Schedule" section below.
Personal computers and workstations: Windows 2000 Professional; Windows XP Professional; and Windows XP Home Edition.
To take advantage of this service, most people can simply import and save the registry file OIT has made available: OITSUS.
Obtaining and installing OITSUS
If you have not used Microsoft's "Windows Update" recently, we recommend you that do so before installing the OITSUS registry file. Using Microsoft's update will ensure that you have the latest service pack that makes this kind of update service possible.
Downloading and installing OITSUS is quick and easy.
- Right-click this link and select "Save Link Target As" or "Save Target As." (The file name you see, OITSUS or OITSUS.reg, depends on whether or not your system is set up to show file name extensions, the .reg portion of the name.)
- Locate the OITSUS file. (If you are typical, the file will be saved in your "My Documents" folder.) Double-click on the OITSUS file to install it.
- Once you have begun the installation process, the Registry Editor
will ask a question similar to this:
"Do you want to add the information in C:\DOCUME~1\YOURNAME\MYDOC\OITSUS to the Registry?" To install the software you must select "Yes."
That's it. The settings are now part of your system.
Update schedule
Once your system is set up to use this service, you will be alerted whenever a critical update is about to be installed on your system. Updates are scheduled for 4 PM. If you are not logged in at 4 PM, the update will be applied 30 minutes after your system is started.
Restarting your computer
Some updates do not require a system restart, others do. If an update
requires that you must restart your system, you will be prompted to do this.
In these cases the update will not take effect until you restart your system.
Before restarting your system, save your work and close any open applications.
To stop using OIT's SUS
Remember: if you remove this configuration, you must use "Windows Update" to keep your computer secure. To stop using this service, remove the registry key by following these steps:
- Select "Run" from the Start menu.
- At the command prompt, as shown in the sample "Run" figure
below,
- type this long registry delete command:
reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate
- and click the OK button when you are done
- type this long registry delete command:
- The system will respond with a message similar to this:
"Permanently delete the registry key SOFTWARE\Policies\Microsoft\Windows\WindowUpdate (Y\N)?"
To delete OITSUS you must respond with a Yes.
FAQ
See the OITSUS FAQ for more information about this service.
U-Wide Information Technology Policies
Links to the University's Security Patch Standard and all University-wide Information Technology policies are available at this OIT website: http://www.umn.edu/oit/policies/