Difference between revisions of "Automate Creation of Microsoft Monthly Patch Baselines"
From RiceFamily Wiki
(→Documentation) |
(→Documentation) |
||
| (3 intermediate revisions by the same user not shown) | |||
| Line 9: | Line 9: | ||
= Documentation = | = Documentation = | ||
| + | * [https://forum.bigfix.com/t/rest-api-using-computer-group-as-target-for-an-action/39106 Using Computer Group for an Action] | ||
| + | * [https://forum.bigfix.com/t/any-way-to-automate-patch-management/12004 Any way to automate patch management?] | ||
* [https://forum.bigfix.com/t/automatic-baseline-creation-and-eventually-autopatching/13882 Automatic Baseline Creation and eventually AutoPatching] | * [https://forum.bigfix.com/t/automatic-baseline-creation-and-eventually-autopatching/13882 Automatic Baseline Creation and eventually AutoPatching] | ||
** [https://bigfix.me/fixlet/details/6254 RESTAPI: Generate tasks to set client settings on target computer - Windows] | ** [https://bigfix.me/fixlet/details/6254 RESTAPI: Generate tasks to set client settings on target computer - Windows] | ||
** [https://bigfix.me/fixlet/details/6092 RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows] | ** [https://bigfix.me/fixlet/details/6092 RESTAPI: Generate uninstall tasks for all MSI applications on target computer - Windows] | ||
| − | |||
| + | = Relevance = | ||
| + | * '''names of unique values of relevant fixlets whose(name of site of it = "Updates for Windows Applications" AND exists names whose(exists (it as string as version) AND it as lowercase does not contain " (superseded)") of it) of members whose(operating system of it as lowercase starts with "win") of bes computer groups whose(name of it contains "Automatic Updates")''' | ||
Parent : [[BigFix RestAPI]] | Parent : [[BigFix RestAPI]] | ||
Latest revision as of 02:50, 16 July 2022
Task
To create a process whereby each month a BigFix baseline can be automatically created that contains all the Microsoft Security Patches released that month. Part of the tricky part will be just selecting the patches for the month in question.
I'm thinking about writing it so that it includes only the patches released since the 1st of the month that start with MS are in the Enterprise Security site (I think that's the original Microsoft site name).
I'll want to exclude any patches that have SUPERSEDED in their names just in case.
We will also want to exclude any fixlet that does not have a default action.
Documentation
- Using Computer Group for an Action
- Any way to automate patch management?
- Automatic Baseline Creation and eventually AutoPatching
Relevance
- names of unique values of relevant fixlets whose(name of site of it = "Updates for Windows Applications" AND exists names whose(exists (it as string as version) AND it as lowercase does not contain " (superseded)") of it) of members whose(operating system of it as lowercase starts with "win") of bes computer groups whose(name of it contains "Automatic Updates")
Parent : BigFix RestAPI
