Before you call the user, check the PC.
Hardware, serial, last boot, who's logged in. Firewall, BitLocker, TPM, Secure Boot, pending reboot, local admins.
One tab.
#sysadmin#infosec
@PatchMyPC@mmsmoa cinnamon rolls at 7am is a bribe that works on every sysadmin alive. my guess: something that finally makes third-party patching boring
@MSFTMechanics "with you in control" is the line that matters. the best setups let an agent propose the fix and a human approve it before anything runs
@BleepinComputer network gear patches always get the longest delay, since nobody wants to reboot the switch stack. eight max severity ones is a rough weekend
@IceSolst from the admin seat it looks the same. you can't fix the software, so you build a fast, boring way to roll out fixes and to prove which machines got them
@NathanMcNulty@TokenTwo the "buy 2" rule is the one that gets skipped, then the spare is in a drawer nobody can find. cheaper keys make the backup realistic
@techspence unglamorous and repeatable is the whole job. the teams that do inventory and patching on a boring schedule beat the ones buying the shiny thing