Controlling what runs.
WHY IT MATTERS
Updates contain security fixes, and unsupported versions receive none.
WHAT MANAGEMENT ALLOWS
Deferring updates for a defined period Requiring updates by a deadline Scheduling installation Restricting which versions are permitted
WHAT DEFERRAL IS FOR
Testing before deployment.
WHAT IT MUST NOT BECOME
Indefinite postponement.
WHAT TO ESTABLISH
A testing period, then a deadline.
WHAT TO TEST BEFORE ALLOWING A MAJOR UPDATE
Business-critical applications Peripherals and drivers Management configuration itself
WHY THAT LAST POINT
Management behaviour changes between major versions.
WHAT TO PLAN ANNUALLY
The major release, which arrives every year regardless.
WHAT TO COMMUNICATE
When updates will be required, and why.
WHAT TO MONITOR
Which devices are on which version Devices that have not updated Devices no longer receiving updates
WHAT TO DO ABOUT THAT LAST GROUP
Plan replacement, since they are a standing exposure.
WHAT TO NEVER DO
Leave update policy unmanaged and assume users will act.
