October 2022 ePatching for Windows

Windows Logo 2022

To:           GS IT All 

Subject:   October 2022 ePatching for Windows – Deadline 10/26/2022 

IMPORTANT – Ongoing BigFix Issues: The DOI BigFix Team is continuing to work with the vendor HCL on resolving reliability issues with authentication into the BigFix Console and Web Reports. The Department considers the issue as “ongoing” until we are told otherwise.  

Except for offices with Approved Exceptions …

Read More…

Enterprise Deployment Activities

The purpose of this page is to document the Enterprise Deployments that are not covered in the ePatching Weekly and Monthly Deployment tables. This page is still under development and may not yet represent a complete picture of enterprise maintained deployments in the environment.

MECM Applications

MECM Baselines

Read More…

Log4Shell Remediation Resources

The Log4Shell (Log4j) situation is rapidly evolving. The purpose of this page is to provide a jump-off point to resources, with an emphasis on Bureau-wide remediation activities. Questions should be directed to GS Security Assurance.

Log4j Version 1.x Vulnerabilities: EVSS has new Nessus plugins that identify Log4j version 1.x instances as vulnerable. (Plugin IDs: 156860, 156032, 156103, 156240). …

Read More…

MECM Internet-Facing Client Management Available

DOI has provisioned an internet-facing management server for clients that only have an internet connection and are not on VPN.  This service will allow clients to process deployments for Windows updates and Enterprise application deployments while not on VPN.  All DOI and USGS Enterprise applications have been distributed to the new server.

Read More…

Office 365: Patching

The DOI, in working to support USGS and other Bureaus, has agreed that the Semi-Annual Channel will be the single supported update channel of Office 365 as it is the default update channel for Office 365 ProPlus.

Currently, Office 365 has been installed in several different ways which would require different update channels.  A change has been …

Read More…

Deploy MECM Applications

These instructions only apply to sites using MECM.

The DOI and USGS MECM teams develop applications that can optionally be deployed by  MECM administrators at their sites. These applications reside on the primary site server and can be distributed and deployed to local sites. The following instructions explain how to distribute an application to a MECM distribution point and create …

Read More…