# Scheduled Maintenance



# Windows Updates

Windows update is a service that runs on your laptop which installs any updates released by Microsoft typically on a monthly basis. Installing Windows updates is important as it helps keep George & Bell's infrastructure secure against outside threats.

### Update Schedule

Cumulative Updates are released by Microsoft on every second Tuesday of the month. These updates include patches to newly found vulnerabilities and small system improvements. These updates will be deployed to all laptops one week after general public release.

Feature updates which consist of large overall improvements or change to the Windows OS are released every six month by Microsoft. These updates are automatically installed onto your laptop after 3-6 months of general public availability.

### Receiving Updates

Each month your laptop will prompt you asking to install the latest round of updates. Below is what you will see within the bottom right-hand corner of the screen when a update is available.

[![windows-update-restart-required.png](https://docs.georgeandbell.com/uploads/images/gallery/2023-03/scaled-1680-/p6Dwindows-update-restart-required.png)](https://docs.georgeandbell.com/uploads/images/gallery/2023-03/p6Dwindows-update-restart-required.png)

For the first seven days after the initial notification, Windows Update will only prompt you to install the updates when convenient. After seven days, Windows Update will become more forceful and ask that you install the update immediately or have it scheduled to install, however you'll still be able to defer the update for another three days (14 days in total). After the three days have elapsed, you will be forced to install the update.

# Application Management

Laptops are managed and updated via a cloud-based service called Microsoft Intune. This service is integrated into Microsoft 365 ensures all laptops have a consist set of update-to-date applications for employees to use.

### Update Schedule

Below is an outline of how often each application is updated within the organization and if the application requires your input.

<p class="callout info">All applications which are not continuously updated are manually tested before release.</p>

<table border="1" id="bkmrk-application-name-upd" style="border-collapse: collapse; width: 100.001%; height: 355.53px;"><colgroup><col style="width: 33.3692%;"></col><col style="width: 33.3692%;"></col><col style="width: 33.3692%;"></col></colgroup><tbody><tr style="height: 29.6338px;"><td style="height: 29.6338px;">**Application Name**</td><td class="align-center" style="height: 29.6338px;">**Update Period**</td><td style="height: 29.6338px;">**Installation Type**</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">1Password</td><td class="align-center" style="height: 29.6338px;">Continuous\*</td><td style="height: 29.6338px;">n/a</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">Google Chrome</td><td class="align-center" style="height: 29.6338px;">Continuous\*</td><td style="height: 29.6338px;">n/a</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">Mozilla Firefox</td><td class="align-center" style="height: 29.6338px;">Continuous\*</td><td style="height: 29.6338px;">n/a</td></tr><tr><td>Microsoft Office</td><td class="align-center">Continuous\*</td><td>n/a</td></tr><tr><td>Microsoft Teams</td><td class="align-center">Continuous\*</td><td>n/a</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">Adobe Reader DC</td><td class="align-center" style="height: 29.6338px;">Monthly</td><td style="height: 29.6338px;">Prompt Always</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">Zoom</td><td class="align-center" style="height: 29.6338px;">Monthly</td><td style="height: 29.6338px;">Silent</td></tr><tr style="height: 29.596px;"><td style="height: 29.596px;">Cisco WebEx</td><td class="align-center" style="height: 29.596px;">Monthly</td><td style="height: 29.596px;">Silent</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">7-Zip</td><td class="align-center" style="height: 29.6338px;">As Required</td><td style="height: 29.6338px;">Silent</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">Duo Authentication for Windows Logon</td><td class="align-center" style="height: 29.6338px;">As Required</td><td style="height: 29.6338px;">Silent</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">LiquidFiles Outlook Plugin</td><td class="align-center" style="height: 29.6338px;">As Required</td><td style="height: 29.6338px;">Prompt If Necessary</td></tr><tr style="height: 29.6338px;"><td style="height: 29.6338px;">WinTech ProVal</td><td class="align-center" style="height: 29.6338px;">As Required</td><td style="height: 29.6338px;">Prompt If Necessary</td></tr><tr style="height: 29.596px;"><td style="height: 29.596px;">Fortinet FortiClient</td><td class="align-center" style="height: 29.596px;">As Required</td><td style="height: 29.596px;">Prompt If Necessary</td></tr></tbody></table>

\* Updates are taken care of by the application itself and are not managed nor initiated by the IT department. At times IT may force an update however.

#### Installation Types

How an application updates varies based upon a couple different factors including how often its used and how long it takes to install. Below are the different ways an application can perform its update.

<table border="1" id="bkmrk-silent-indicates-tha" style="border-collapse: collapse; width: 100%; border-width: 1px; border-style: hidden;"><colgroup><col style="width: 21.358%;"></col><col style="width: 78.642%;"></col></colgroup><tbody><tr><td>Silent</td><td>Updates will always be installed in the background without causing any interruption.</td></tr><tr><td>Always Prompt</td><td>Updates will always prompt you prior to installation.</td></tr><tr><td>Prompt If Necessary</td><td>Update may prompt you but only if required to do so. Typically this means that the update will install silently in the background, unless you are actively using the application.</td></tr></tbody></table>

### Update Process

When an application is deployed to your laptop, you will see an series of notifications as the installation progresses. The first notification will inform you that the installer is being downloaded to your laptop (shown below). Once complete, a second notification will appear indicating that the installation is in progress.

[![7-zip_installation.png](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/scaled-1680-/7-zip-installation.png)](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/7-zip-installation.png)

If the update process determines that you have an application open that needs to close, a prompt will appear asking that the conflicting application be closed. You will also be given the option of deferring the update/install if desired. If deferred you will not be prompted again for a period of 24 hours. In most cases you can defer the installation three times, after which you'll be forced to complete the installation.

[![psappdeploytoolkit_prompt.png](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/scaled-1680-/psappdeploytoolkit-prompt.png)](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/psappdeploytoolkit-prompt.png)

Once the installation has successfully installed, a third and final notification will appear.

[![7-zip_installation_completed.png](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/scaled-1680-/7-zip-installation-completed.png)](https://docs.georgeandbell.com/uploads/images/gallery/2023-02/7-zip-installation-completed.png)

### FAQ

**What happens if the application fails to install?**

You can safely ignore the message (unless its impacting you) as IT support will be notified of the failed update. If required, IT support may reach out to resolve the issue.

**After deferring an update, I received a notification saying that the update failed. Is this ok?**

This is expected. When you defer the application, Microsoft Intune's doesn't understand the difference between a deferred update and a failed update so a failed message is displayed. In either case, Microsoft Intune will reattempt the update in 24 hours.

**How long does a deferral last?**

Microsoft Intune's will wait 24 hours before trying the update again.

**I received a prompt for an application that wasn't open. I thought it would install silently without prompting me?**

At times IT may deploy an update forcing a prompt every time. This is usually done if the update takes a considerable amount of time and there is concern that the laptop may be accidentally shutdown during the updating process.

**Can you force an update to be installed at a certain time?**

Unfortunately not. Every laptop checks in with Microsoft Intune on initial sign-in and every 8 hours there afterwards. Its during these times that updates will be installed. IT has no control over this process.

**Can I force an update to occur?**

Not directly. You can if you wish, force a synchronization with Microsoft Intune. If an update is available, it *should* install shortly after the synchronization. To force an synchronization:

1. Open **Settings** via the Start Menu.
2. Select **Accounts**.
3. Within the left-hand column, select **Access Work or School**.
4. Select **Connected to GBC AD Domain**. An Info button should appear. Select **Info**.
5. Under *Device Sync Status*, select **Sync**.

**I have an application that isn't listed that I think should be included in the regular updates?**

Please let us know and we'll look into adding it.