Automatically Approving Windows Update List
To apply Windows update policies in Genian NAC, it is necessary to configure the update list to be applied to endpoints.
After configuring the Windows update list, new update targets will be automatically approved and added to the update list.
- Go to Policy in the top panel.
- In the left Policy menu, select Windows Update Policy.
- In the Select Action menu, click Create.
- Select the checkbox for Product and Classification items for the update target. (Multiple products/classifications can be selected)
- Click the Create button.
Note
Approval Deferral Period setting refers to the waiting period for new updates to automatically change to administrator approval targets (setting 0 means immediate administrator approval).
Windows Update Product List
The update function is provided for products in the following categories:
| Item | Sub-Products |
| Office | Office 2003, Office 2007, Office 2010, Office 2013, Office 2016, Office XP |
| Server | Windows Server 2003, Windows Server 2003 Datacenter Edition, Windows Server 2008 |
| Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2 | |
| Windows Server 2016, Windows Server 2019, Windows Server 2019 and later Servicing Drivers | |
| Windows Server 2019 and later Upgrade & Servicing Drivers | |
| Windows 10 OS | Windows 10, Windows 10 LTSB, Windows 10 S and Later Servicing Drivers |
| Windows 10 S Version 1803 and Later Servicing Drivers, Windows 10 S Version 1803 and Later Upgrade & Servicing Drivers | |
| Windows 10 S version 1809 and later Servicing Drivers, Windows 10 S version 1809 and later Upgrade & Servicing Drivers | |
| Windows 10 S version 1903 and later Servicing Drivers, Windows 10 S version 1903 and later Upgrade & Servicing Drivers | |
| Windows 10 version 1803 and Later Servicing Drivers, Windows 10 Version 1803 and Later Upgrade & Servicing Drivers | |
| Windows 10 version 1809 and later Servicing Drivers, Windows 10 version 1809 and later Upgrade & Servicing Drivers | |
| Windows 10 version 1903 and later, Windows 10 version 1903 and later Servicing Drivers | |
| Windows 10 version 1903 and later Upgrade & Servicing Drivers | |
| Windows Other OS | Windows 2000, Windows 7, Windows 8, Windows 8.1 |
| Windows Vista, Windows Vista Dynamic Installer, Windows Vista Ultimate Language Packs | |
| Windows XP, Windows XP 64-Bit Edition 2003 Version, Windows XP x64 Edition | |
| Other Tool | Microsoft Defender Antivirus, Windows Internet Explorer 7 Dynamic Installer |
| Windows Internet Explorer 8 Dynamic Installer, Windows Media Dynamic Installer | |
| Windows Ultimate Extras |
Windows Update Classification List
Provides update features categorized by the following items:
| Classification | Description |
|---|---|
| Feature Pack | New product features initially distributed outside the context of a product release and generally included in the next full product release. |
| Tool | A utility or feature that helps complete a task or set of tasks. |
| Security Update | A broadly distributed fix for product-specific security vulnerabilities. Security vulnerabilities are rated by severity. Severity ratings appear in Microsoft Security Bulletins as Critical, Important, Moderate, or Low. |
| Service Pack | A tested cumulative collection of all hotfixes, security updates, critical updates, and updates. A service pack may also contain additional fixes for problems found internally since the product's release. A service pack may also include a limited number of design changes or features requested by customers. |
| Update | A widely released fix for a specific problem. Updates address non-security-related bugs that are not critical. |
| Update Rollup | A tested cumulative set of hotfixes, security updates, critical updates, and updates, packaged together for easy deployment. Rollups typically target a specific area. |
| Definition Update | A widely released and frequently used software update that includes additional capabilities for a product's definition database. Definition databases are often used to search for objects with specific characteristics, such as malware, phishing websites, or junk mail. |
| Critical Update | A widely released fix for a specific problem that resolves critical bugs not related to security. |