0

Our application needs to run in a locked-down operating system. Due to quality and regulatory concerns, all updates shall be prevented or blocked.

For example, we go through a checklist of Windows OS settings and verify they are set to prevent any updates. This doesn't actually test an update will be blocked.

Other than waiting for the next OS update from the developer, how can it be verified in Windows and other operating systems that all automatic updates will be prevented?

  • 1
    Windows, Unix... ? – Prome Nov 7 at 6:00
  • Clarification in edit. – 00Zero Nov 7 at 14:50
  • I'm voting to close this question as off-topic because it belongs to DevOps or the relevant platform stackexchange – Rsf Nov 7 at 14:55
  • Thanks for the feedback. How would the question need to be asked to fit in this stackexchange? – 00Zero Nov 7 at 15:05
  • I disagree with the close and down votes--we've also been in the situation the OP describes and it is definitely a testing question. For example, we needed to ensure Windows 10 wouldn't automatically restart to install updates while our software is running (possibly for days). While asking how to make such configuration changes might be a DevOps or platform question, asking how to test such changes is perfectly on-topic here, IMO. – c32hedge Nov 7 at 15:47
1

There are OS that force updates and others and won't update unless you act.

The latter is naturally not a problem.

For the former, I see two options:

1 - You can run inside a Virtual Machine, using VMWare e.g. Probably you will need to refactor the data migration.

enter image description here

2 - You can monitor the version using some script that run by a CRON job. In Java, e.g., you can use the follow statment to fetch the OS Version:

System.getProperty("os.version");
1

I guess the simplest way is to run cmd tool that is responsible for updates and check if it fails to update (error code or error message returned) your system. However you should be prepared to the fact it can take your system to undesirable state which will require roll-back.

To have more "reliable" and "proper" ways you need to know what OS you are talking about and which version. And better ask this in https://serverfault.com/ community.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.