Failed Compliance Check: Operating System Auto-Update Disabled

In order to ensure the security of your company data, your company can configure Security Compliance Checks that your device must pass to use Venn.

If your company has enabled the Operating system auto-update security compliance check, the operating system’s automatic update feature must be enabled and the Operating System must have been updated within the number of days in your company's admin settings. If your operating system isn't up-to-date, the computer might be exposed to security vulnerabilities, compatibility issues, and performance problems, which can increase the risk of cyberattacks and data loss.

  • If your computer passes this check, your Compliance Status will say Operating system auto-update enabled.
  • If your computer fails this check, your Compliance Status will say Operating system auto-update disabled. This indicates that the operating system’s automatic update feature is not configured properly to keep the computer up-to-date. 

To comply with this requirement and/or resolve the failed check, ensure the operating system’s automatic update feature is enabled:

If you failed this security check:

  1. Sign out and close the Workplace app.
  2. Follow the instructions below to attempt to fix the issue.
  3. Restart your computer.
  4. Sign in to Workplace and wait for the compliance checks to finish processing.
  5. If the check fails again, contact your IT department.

Enable Operating System Auto-Update for Windows 10 & 11

If your device is maintained or managed by a third-party service, follow the instructions under Managed Workstations. Otherwise, follow the instructions under Unmanaged Workstations.

On Unmanaged Windows Workstations

If your device is not maintained or managed by a third-party service provider, Windows Update could be manually disabled, causing your computer not to receive automatic updates. 

To enable Operating System automatic updates for Windows 10 & 11:

  1. Right-click on your Start button to open the WinX Menu.
  2. Select Run.
  3. Type services.msc and click OK to open the Services Manager.
  4. Verify that the Windows Update Status is set to Running. If it appears in the list, also verify that the Windows Update Medic Service Status is set to Running.
  5. If either or both of the services are disabled, right-click on the service name and select Start.
    Screen_Shot_2019-11-04_at_3.19.07_PM.png

Additionally, we recommend that you update your Windows Update settings to ensure that your Operating System stays up-to-date:

  1. Click the Start button and navigate to settings.
  2. On Windows 11, click Windows Update. On Windows 10, click Updates and Security, then Windows Update.
  3. Click Advanced options.
  4. Enable the settings to: 
    • Update other Microsoft products when you update Windows
    • Automatically download updates as soon as possible, including over metered connections
    • Notify you when your device requires a restart to finish updating

On Managed Windows Workstations

If your device is maintained/managed by a third-party service provider, your Microsoft updates may be managed by a tool other than the native auto-service update. 

You can still pass this security check as long as the device's registry fields are updated to reflect this and the device's updates are maintained via active management. Venn will continue to check whether or not recent patching activity has been completed within the appropriate time frame set by the  company's policy (the default is 45 days, but it can be set to a shorter interval). 

If this is the case for your device, reach out to your service provider for support adding the information below to your device's registry.

The following mandatory registry fields must be populated in HKEY_LOCAL_MACHINE\SOFTWARE\AgencyUpdate:

  • ManagedBy: The name of the service provider.
  • RMMTool: Identify the remote management tool used to manage the device.
  • ManagedBySupportEmail: Service provider's email contact
  • ManagedBySupportPhone: Service provider's phone contact
    Screen_Shot_2019-11-04_at_3.38.05_PM.png

Enable Operating System Auto-Update for macOS

To enable Operating System automatic updates for macOS:

  1. Click the Apple menu.
  2. Click System Settings.
  3. Click General.
  4. Click Software Update.
  5. Click the Info button to the right of Automatic updates.
  6. Verify the following options are enabled:
    • Check for updates.
    • Download new updates when available.
    • Install macOS updates.
    • Install Security Responses and system files.

Apple_Automatic Updates_Info.png

Was this article helpful?