BlueKeep HIP policy

Paul_Lupini — Wed, 17 Jul 2019 14:32:16 GMT

I've created a HIP policy to filter GP users if they are missing the security patches for BlueKeep. However, with monthly roll-ups I have to go in and generate a new HIP object each month.

We currently patch our Windows machines 30 days behind Microsoft's rotation (with exception to some security patches) so I can't just do a carpet check for any missing patch. Same with using severity.

Just curious if anyone knows of a more graceful way of doing this I'm missing.

Re: BlueKeep HIP policy

BPry — Wed, 17 Jul 2019 17:11:07 GMT

@Paul_Lupini,

Given your restrictions I think you are doing this the best way you can.

topic Re: BlueKeep HIP policy in General Topics

BlueKeep HIP policy

Re: BlueKeep HIP policy