Automatic Updating of PCs

How and why PCs get updated via the network from central University servers, and why it can sometimes make them slow to start up. IT Services are continually working to decrease start up times for PCs running Windows.

Q: Why is my computer taking so long to start up these days?

You may have noticed that your computer takes a while to start up, and that some days it takes longer than others. This is all down to changes in the technology and the way in which networked PCs can be managed under Windows. In fact, a networked personal computer is rather less personal than you might think.

Q: What does that mean?

The management tools provided with Windows allow updates and software applications to be applied to any networked PCs running Windows XP, without anyone having to visit the PC. When you’re running a network consisting of around 5000 PCs, that’s a significant advantage.

The key tools we are using are known as Windows Software Update Services (WSUS) and Group Policy. We also use automated scripts that are invoked when you start up, shutdown, logon or logoff. These allow us to:
  • install new software or apply updates
  • apply security patches
  • undertake essential system maintenance.
This can be done automatically for:
  • one or many computers,
  • an individual,
  • a single school or department,
  • all staff or all student computers,
  • the entire University.
Q: Why are IT Services doing this?

There three reasons:
  1. Resources – with the number of computers we have in the University now, it would be impossible – moreover impossibly expensive – to deploy IT Services staff to make changes to all of these individually.
  2. Functionality – Our system suppliers are releasing updates and hotfixes more regularly. We need to be able to apply these quickly to support important events such as Clearing and HESA returns, for example.
  3. Security – Microsoft in particular are continually releasing security patches and software updates to their applications. If we don’t keep up to date with these there can be serious consequences.
Q: What do you mean by serious consequences?

Hacking and viruses. Hacking tends to be more of a threat to servers, but viruses are a potential threat to all computer systems. Since 2005 we have been hit by two serious virus attacks. The first time, some people were still on Windows 9x, which limited our ability to respond to the problem. The second time, everyone was on Windows 2000 or XP.

Q: So what does all this have to do with slow start up?

At the time of the Zotob infection, we had already been piloting the new WSUS tool in IT Services. This actually protected most IT Services systems with all the patches they needed. As a result of the virus infection, we began to introduce the changes to the way systems start up and how they get their updates. All University systems now get updates automatically.

The slower start up or shut down times (particularly on older PCs) is the price we pay for increased security and better protection against virus outbreaks. The actual time taken to start up depends on a number of factors, the most important one being the age of the computer. The older the system, the slower it will be.

Q: It’s too slow – can I opt out?

No, you can’t. Leaving out even a small number of computers increases the risk that something or someone can get inside the University network and potentially wreak havoc. Updates are applied to all University computers, including open desktops and laptops.

Hopefully, this has helped explain the context of what we are doing and why. If you still feel this is causing you considerable problems, let the IT Service Desk know by ringing ext. 2000.


Q: What should I do if I have a University computer at home?

You should not be using a University owned desktop computer at home as there is no provision for updating these. Laptops will continue to be updated with anti-virus and windows updates when connected to the Internet. However, for major software updates/installations, a connection to the University network is required.

Q: What about personally owned computers?

IT Services do not support personally owned computers. However, they are as much at risk as University computers. You can find advice on keeping your computer up to date with security patches on the web. For Windows PCs a good starting point is: http://windows.microsoft.com/en-GB/windows/help/windows-update. Apple computers also need regular security updates: http://www.apple.com/.

We’d also recommend you install anti-virus, personal firewall and spyware detection software. F-Secure, (vs. 8 and above), includes all this, and University staff and students are licensed to install this on personally owned computers. Please see following webpage for more details on how to use F-Secure at home and how to obtain the software.

Microsoft Security Essentials also provides basic anti-virus and security for home use.

Date: March 2014