About the importance of Windows security updates

Windows security updates are a critical part of system protection as they fix known vulnerabilities and improve both security and overall stability of the operating system. Microsoft regularly releases updates for Windows, including security updates, feature updates, and other fixes.

 Microsoft releases security updates to the world, criminals (and of course also legitimate security researchers) begin reversing, that is, reverse-engineering the updates to gain an understanding of what vulnerabilities have been fixed.

Soon vulnerabilities and their technical details are known to criminals, and exploits are being written for them, i.e. attack code that can exploit vulnerabilities.

Then the exploit is used, and all Windows systems that have not installed updates at this stage are at risk.

The Windows update process is designed to be as seamless as possible for the user. The operating system automatically checks for new updates from Microsoft's servers, downloads them, and notifies the user when they are ready to be installed. In some cases, the system may require a restart to complete the updates.

You can see the current status in Windows Update settings.

Windows allows users to automate the update process, ensuring that the system stays up to date without manual intervention. You can do this with a group policy.

Open Group Policy Management console and modify the domain GPO policy.

Computer Configuration -> Policies - Administrative Templates -> Windows Components -> Windows Update

From the Windows Update section, select the option "Configure Automatic Updates". Click on it on the right and select "Edit".

Change the settings so that updates are installed automatically (4 - Auto download and schedule the install). Choose a suitable time and day for installing the updates.

In order for the settings to take effect immediately, run 

The lab takes a couple of minutes to start up, please wait patiently and add more time if needed. You don't need to close the lab between switching modules in this course. You can log in to the server via RDP with the username "

Windows practice

When automatic updates are enabled, run Check.ps1 and enter flag 4.

## About the importance of Windows security updates

Windows security updates are a critical part of system protection as they fix known vulnerabilities and improve both security and overall stability of the operating system. Microsoft regularly releases updates for Windows, including security updates, feature updates, and other fixes.

### Patch Tuesday

### Clock starts ticking from Tuesday

Because ***at the moment*** Microsoft releases security updates to the world, criminals (and of course also legitimate security researchers) begin reversing, that is, reverse-engineering the updates to gain an understanding of what vulnerabilities have been fixed.

Soon vulnerabilities and their technical details are known to criminals, and exploits are being written for them, i.e. attack code that can exploit vulnerabilities.

Then the exploit is used, and all Windows systems that have not installed updates at this stage are at risk.

![](sanity:image-4dbde163a3a33d6628d25d29b75a3087d33ee4a8-1024x1024-png)

### How Updates Work

The Windows update process is designed to be as seamless as possible for the user. The operating system automatically checks for new updates from Microsoft's servers, downloads them, and notifies the user when they are ready to be installed. In some cases, the system may require a restart to complete the updates.

---

## Review of Updates

You can see the current status in Windows Update settings.

![](sanity:image-426f3d23fc868b96c4140e4888cf0ec25206b08e-1388x1218-png)

![](sanity:image-8ef549b3a06934baf1e2c55e01ad31b242b583f2-1116x594-png)

---

## Automation of Updates

Windows allows users to automate the update process, ensuring that the system stays up to date without manual intervention. You can do this with a group policy.

Open Group Policy Management console and modify the domain GPO policy.

![](sanity:image-a4d7a192b9e438feafba7842eeaf38dddba0579b-796x308-png)

![](sanity:image-f24463a917951e1fd56e63341364c0a10fa0e6cd-1106x856-png)

Open **Computer Configuration -> Policies - Administrative Templates -> Windows Components -> Windows Update**

![](sanity:image-b687e7eee8758be25a62278329c7a13e116b9df0-1036x584-png)

From the Windows Update section, select the option "Configure Automatic Updates". Click on it on the right and select "Edit".

![](sanity:image-87a6f0f775b050cf6f15856405541a5401869017-1824x952-png)

Change the settings so that updates are installed automatically (4 - Auto download and schedule the install). Choose a suitable time and day for installing the updates.

![](sanity:image-827593db9cc4f3cb8a00e28cb161e8b206a1fe23-1354x1258-png)

In order for the settings to take effect immediately, run **gpupdate /force** in the PowerShell terminal.

![](sanity:image-e9cec2bfee8606f88a3e5280d6a0a006068a484f-1354x488-png)

---

## Tasks

@exercise 64d6c74aa9d8

### Enable automatic updates

When automatic updates are enabled, run Check.ps1 and enter flag 4.

@exercise 1740345d3dd9


Automating security updates

In this course, we go through the basics related to managing Windows systems and maintaining information security.

In this course, we will go through the basics of Windows system administration and cybersecurity maintenance.

We familiarize ourselves with Windows virus protection, firewall, and automatic updates. We learn to use remote desktop connections, registry editor, PowerShell, server manager, and group policies.

The course does not go into great depth on Windows domains, attacks on them, or hardening. These more advanced topics are covered in the "Windows - Attack and Defense" course.

Automating security updates

About the importance of Windows security updates

Patch Tuesday

Clock starts ticking from Tuesday

How Updates Work

Learn to hack — start here