Phone: +64 7 823 4666

Computer and Device Maintenance Pathway

The below information is strictly confidential and only to be viewed by CompuHub customers; NO part of this documentation can be shared, modified or copied.

Please note, CompuHub would like to inform its customers and users that we do not assume any responsibility for any damage, data loss, or business interruption that may occur as a result of vendor software, driver, or firmware updates. This disclaimer applies to all software, drivers, or firmware updates provided by external vendors and utilized by our customers or users.

Understanding Your Maintenance

1. Monthly: We push through Security, Windows, Driver and Firmware updates.
2. Annual: We confirm that your devices and infrastructure comply with our Standard Operating Procedures, security, software and hardware guidelines and update if necessary.
3. Policies: We push through security and maintenance policies.
4. Cybre Security: License dependent.

Upgrading

Upgrading refers to installing a newer version of the Windows operating system on your computer. This can be done to take advantage of new features, bug fixes, security vulnerabilities, or stay updated with the latest technology. Upgrading typically involves purchasing a new version of Windows, downloading it from the Microsoft website, and installing it on your computer.* This does not form part of your maintenance pathway.

Maintenance

Maintenance refers to the process of keeping your Windows operating system in good working order by performing routine tasks such as installing updates, cleaning up temporary files, and running diagnostic tools to check for problems. Maintenance tasks are typically performed on a regular basis to ensure that your system is running smoothly and to prevent problems from occurring. Maintenance tasks can be performed manually or automated using built-in Windows tools like Disk Cleanup, Disk Defragmenter, and Windows Update

Cyber Security

Endpoint Protection
Advanced Threat Defense
Mail Security
Cloud app Protection
File Server Security
Full Disk Encryption

Endpoint Protection

Leverages a multilayered approach that utilizes multiple technologies working together to balance performance, detection and false positives, and with automated malware removal and mediation.

LiveGuard Advanced

Provides proactive cloud-based threat defense against targeted attacks and new, never-before-seen threat types, especially ransomware.

Monthly quality updates

Windows monthly quality updates help you to stay productive and protected. They provide your users and IT administrators with the security fixes they need and safeguard devices so unpatched vulnerabilities can't be exploited. Quality updates are cumulative; they include all previously released fixes to guard against operating system fragmentation. Reliability and vulnerability issues can occur when only a subset of fixes is installed.

Microsoft (2023) Monthly quality updates. Available at:
https://learn.microsoft.com/en-us/windows/deployment/update/quality-updates

Quality Updates

Quality updates are provided on a monthly schedule, as two types of releases:
1.Non-security releases.
2.Combined security + non-security releases.

Non-security releases provide IT admins an opportunity for early validation of that content prior to the combined release. Releases can also be provided outside of the monthly schedule when there is an exceptional need.

B Releases

Most people are familiar with what is commonly referred to as Patch Tuesday or Update Tuesday. These updates are released on the second Tuesday of each month, and are known as the B release (where “B” refers to the second week in the month). B releases are typically published at 10:00 AM Pacific Time (PST/PDT).

Because they are cumulative, B releases include both new and previously released security fixes, along with non-security content introduced in the prior month’s Preview C release (see the next section). These updates help keep Windows devices secure and compliant by deploying stability fixes and addressing security vulnerabilities. B releases are mandatory.

Channels for availability of B releases include: Windows Update, Windows Server Update Services (WSUS), and the Microsoft Update Catalog.

C Releases

IT admins have the option to test and validate production-quality releases ahead of the planned B release for the following month. These updates are optional, cumulative, non-security preview releases known as C releases. These releases are only offered to the most recent, supported versions of Windows.

OOB Releases

Out-of-band (OOB) releases might be provided to fix a recently identified issue or vulnerability. They are used in atypical cases when an issue is detected and cannot wait for the next monthly release, because devices must be updated immediately to address security vulnerabilities or to resolve a quality issue impacting many devices.

Some key considerations about OOB releases include:
•OOB releases are always cumulative, and they supersede any prior B or C release.
•The OOB releases will generally require IT admins to deploy off-cycle.
•Some OOB releases are classified as critical and will automatically be pushed to Windows Server Update Services and Windows Update for Business, just like the B releases.
•Some OOB releases are non-critical and only go to the Microsoft Update Catalog for users or organizations to voluntarily seek out the update.

Security Policies We May Implement

Endpoint Manager
Defender - Advance Theft Protection (ATP)
Self Service Password Reset (SPPR)

Multifactor authentication (MFA)
Microsoft (2023) Multifactor authentication for Microsoft 365. Available at:
https://learn.microsoft.com/en-us/microsoft-365/admin/security-and-compliance/multi-factor-authentication-microsoft-365?view=o365-worldwide

App Policies We May Implement

Microsoft 365 Apps for Windows 10 and later
ESET Protect
LogMeIn
Adobe DC Reader
Adobe Create Cloud

Configuration Profiles Policies We May Implement

OneDrive, Silently Sign In Users To OneDrive App Windows Credentials
OneDrive, Select Silently move windows known folder to OneDrive
OneDrive, Disable tutorial that appears at the end of OneDrive setup
OneDrive, Disable the tutorial that appears at the end of OneDrive setup
OneDrive, Prevent users from syncing personal OneDrive accounts
OneDrive, Use OneDrive Files on-demand
OneDrive, SharePoint Site Libraries To Sync
OneDrive, Force SharePoint Sync Script

Outlook, Setup Outlook Email Automatically
Taskbar Icon Deployment
Configure Time Zone

Edge, Automatically sign in to Edge
Edge, Offer to save passwords in Edge
Edge, Show Favourites Bar
Edge, Default Search Provider Set To Google
Edge, Default Search Provider URL
Edge, Default Search Provider URL Suggestions
Edge, Action to take on start-up
Edge, Set the new tab page as the home page
Edge, Set Google as the home page
Edge, Sites to open when the browser starts
Edge, Favourites deployed to Edge

Windows Update Ring
Intune – Connect to MDM Manually
Wi-Fi – Sign into Wi-Fi automatically
Remove Admin Rights from Azure AD Joined Device (Customer request only)

 

This product has been added to your cart

CHECKOUT