Automated Security Patching FAQ

Q: What is SCCM?
A: System Center Configuration Manager, or SCCM, is a Microsoft product designed to help large organizations deploy updates, patches, and other software to networked computers. By centrally managing patch deployment, SCCM allows WCMC to reduce the threat of viruses and other security breaches.

Q: Which computers are eligible for SCCM?
A: As with antivirus software, ITS' policy is that SCCM should be installed on every computer. To begin with, ITS is targeting only tagged Windows 2000 or XP workstations. In the future, Macintosh and Linux workstations may also receive software via SCCM.

Q: How does SCCM run on my computer?
A: SCCM installs a small software "agent". This software runs silently, with no user interaction required.

Q: How can I tell if SCCM is on my computer?
A: The best way to determine as to whether or not SCCM is installed is to check your Control Panels and look for one labeled "Systems Management". Seeing this control panel confirms that you are running SCCM.

Q: Will I notice SCCM in any way?
A: Yes. Approximately once a month, you will see a prompt on your screen telling you that a new security patch has been installed and that your computer needs to reboot. You will be given the choice to reboot your computer at that point, or wait until a more convenient time.

Q: How can I tell if a security update has been installed?
A: Security updates installed via SCCM will appear in your Add/Remove Programs control panel, just as they would if they were installed through Windows Update.

Q: What should I do if I think I need a security update but I don't see it in Add/Remove Programs?
A: Depending on the priority of the update, it may take 24 hours to 1 week before an update is installed. If you have questions or concerns about the deployment schedule, contact the ITS Service Desk.

Q: Can I still install updates myself by using Windows Update?
A: Yes, although you no longer have to.

Q: My computer automatically downloads and installs Windows updates. Does SCCM impact this?
A: No. We are not removing your ability to control your own software update schedule.

Q: I've heard SCCM can cause my computer to be unstable. What if I don't want SCCM?
A: ITS thoroughly tested SCCM on over 200 Windows XP and 2000 computers before deploying it. No computers were adversely affected during the testing period. If you have further concerns about having SCCM installed on your computer, please contact the ITS Service Desk.

Q: Can I uninstall SCCM?
A: As SCCM is mandatory for all eligible tagged computers, SCCM cannot be uninstalled except by an authorized ITS systems administrator. SCCM will only be uninstalled as part of the disconnect process.

Q: I've heard security patches and software updates can cause my computer to be unstable. What are you doing to make sure this doesn't happen?
A: ITS thoroughly tests each patch and software update before installing it on your computer. ITS goes through 2 separate rounds of testing and installs each patch and security update on over 100 different computers before releasing it to the general user community. ITS will not install software on your computer until it has been tested and certified as stable. While we cannot guarantee that a new software installation won't adversely affect your computer, we take every precaution to make sure these disruptions are kept to an absolute minimum.