A discussion took place regarding the process of remediation for patching and whether the device reaches out to a CDN or pulls directly from the vendor website. ControlUp has tools for analyzing network impact, including the ability to disable the default CDN and download patches directly. The location where patches are downloaded and stored was also mentioned. The impact on the network will depend on the type of update, but patches are downloaded as compressed files and then uncompressed during deployment.
Read the entire article here...
ControlUp for Compliance (Secure DX)
ControlUp for Compliance (Secure DX) training and support-related archives from inside the ControlUp Community on Slack.
How to Clean Up Old Patches on ControlUp Client Devices
A user asked for a way to clean up old patches on client devices without causing any issues. It was recommended to enable logs in the C:\ProgramData\ControlUp\CU4C\logs\files or C:\ProgramData\ControlUp\SecureDX\logs location to check for remediation failures or aborts. It is safe to delete subfolders in the patches folder.
Read the entire article here...
Read the entire article here...
Dealing with a Compliance Alert in ControlUp
A user received a compliance alert about the "built-in" local Windows administrator account being in the local administrators group, which is a default and mandatory setting. There was discussion about how to deal with this issue and suggestions were made to check and exclude items in the scanning template. One user suggested that the setting could be more useful if it could identify other accounts and ignore the built-in "administrator" account. The issue was passed on to the secure DX PM.
Read the entire article here...
Read the entire article here...
Automating the Deployment of ControlUp for Compliance
A user asked about automating the deployment of ControlUp for Compliance (formerly known as Secure DX) for new physical machines. Another user shared a script that could run the installation silently. The script can be found at https://cdn.spm.controlup.com/agent. Instructions were provided on checking for the latest version and running the script if necessary.
Read the entire article here...
Read the entire article here...
ControlUp for CVE Remediation in Large Organizations
A user inquired about using ControlUp for remediating CVEs in their organization with 40k+ devices. They were looking for a proposal template to use and announced their plan to target the most vulnerable devices first in batches. Another user shared that they have been patching their devices on a monthly basis and asked about others' patching schedules. A response mentioned that they encountered some issues related to scheduling but they have since been fixed and the product has been stable for months. The user then thanked them for the feedback.
Read the entire article here...
Read the entire article here...
Configuring Risk Levels in ControlUp Secure DX/Apps
A user asked if it is possible to define the risk levels themselves under Secure DX/Apps. Another user responded that currently risk scores are not configurable and are based on factors such as CVE scores and number of affected devices. This means that they are unable to change the risk levels at this time.
Read the entire article here...
Read the entire article here...
OS Compliance and Update Dashboard in ControlUp for Desktops
Some members discussed the possibility of having an OS Compliance and Update Dashboard in ControlUp for Desktops. Currently, this function is available through ControlUp for Compliance, with support for Windows, macOS, and Linux being planned. There were discussions about making this feature available in the base ControlUp for Desktops product, but it is not confirmed. The link to upvote for this feature can be found on the post tagged as "Have an idea? Share it!".
Read the entire article here...
Read the entire article here...
Outlook Classic Freezing and ControlUp’s Roadmap for Root Cause Analysis
A user noticed that 3pm-3:59pm had many employees experiencing Outlook Classic freezing. ControlUp may have further analysis of incidents like this on their roadmap and it is suggested to contact @member for further information. Deeper analysis is expected in Q2 2025.
Read the entire article here...
Read the entire article here...
Issue with Page Refresh on Secure DX
Several users reported experiencing a page refresh every 30 seconds on Secure DX, even when Auto-Refresh was not enabled. Some users tested on different tenants and found that the refresh only occurred with Auto-Refresh enabled. After some troubleshooting and guidance from @member Joel, it was discovered that using the "empty cache and hard refresh" option in developer tools could fix this issue. It appears the refresh was caused by items left in local storage.
Read the entire article here...
Read the entire article here...
ControlUp Scripts for Intune Compliance Checks
A user is interested in a ControlUp script to force an Intune Compliance Check on a Windows Device. While there is no official script available, it is a potential future roadmap item for Secure DX. Other users suggest creating a PowerShell script and setting it as an action on the device. A recommendation is made to include a check that ensures the correct components are installed on the device.
Read the entire article here...
Read the entire article here...