Carnegie Mellon University School of Computer Science
October 18, 2021

Critical Microsoft Updates

Microsoft has released critical security patches for products like Windows, Internet Explorer, Edge, and Office. 

What do I need to do?

All SCS Windows computers have new updates available which must be applied to appropriately patch the operating system. Review the system notification area of the Windows taskbar for system update notifications and apply any pending updates.

SCS Windows computers are currently undergoing a multi-year domain transition. This means some computers may be on the existing SCS domain or the new Andrew domain and this will determine the update method. If you are unsure which domain your computer is bound to, or for more information on Windows update in our environment, please visit our Windows Update page.

Please Note: You must restart your computer as soon as possible for the update process to complete. If your system has not been updated, you can follow the steps below to update manually. 

Andrew Domain (Windows 10) - Updating via Settings

Below is the manual method to check for updates.  Updates install automatically.

  1. Open Settings.
    1. Click on the Windows Menu, also known as the Start Menu.
    2. Search for “Settings”.
    3. Click on Update & Security.
  2. Click Check for updates. 
  3. Once completed, please restart your computer.

Please Note: In June of 2021 SCS Computing Facilities migrated Windows 10 Andrew domain workstations to Intune co-management with Windows Update for Business.  This new update method does not require VPN for Microsoft updates.  You can determine the method your Andrew Windows computer uses to update below.  SCS domain machines use this legacy method.

Working Remotely - VPN Required

Connect via VPN at least 4 hours every week

Off-campus Andrew domain Windows computers not using Windows Update for Business will need to connect to the VPN to install updates. Please visit the Andrew Computing Services website for more information on VPN.

If you do not already have Cisco AnyConnect, install instructions are below.

Download & Install Cisco AnyConnect VPN Client

  1. Download the Cisco AnyConnect VPN client.
  2. Double-click the downloaded file to run the installer.
  3. Follow the onscreen instructions to install.
  4. Uncheck all the boxes except VPN for Installation Type.

Connecting to the CMU network via VPN

  1. Connect to the Internet.
  2. Open the Cisco AnyConnect Secure Mobility Client.
  3. Type vpn.cmu.edu and click Connect.
  4. Select the General Use Campus VPN from the Group drop-down menu.
  5. Enter your Andrew userID and password.
  6. Click OK

Legacy - Andrew Domain (Windows 10 and Windows Server) - Updating via Software Center

  1. Open Software Center.
    1. Click on the Windows Menu, also known as the Start Menu.
    2. Search for “Software Center”.
    3. Click on the Software Center desktop app.
  2. Click Updates in the upper-left sidebar.
  3. Click Install All in the upper right-hand corner of the window. 

Off-campus Andrew Windows computers will need to connect to the VPN to install updates. Please visit the Andrew Computing Services website for more information on VPN.

Please Note: Not all updates will require a reboot. The system will prompt for reboot should the installation require it. 


Note: It is important that your computer stay on during the update process. Laptops should be plugged into their power supply or dock before proceeding. Loss of power or interruption of patch installation can cause operating system corruption and affect functionality. 


Legacy SCS Domain - Updating via Windows Update (Windows 10, 8.1)

  1. Open Windows Update by clicking the Start button in the lower left corner. Type Update, and then, in the list of results, click either Windows Update or Check for updates.
  2. Click the Check for updates button and then wait while Windows looks for the latest updates for your computer.
  3. If you see a message telling you that important updates are available, or telling you to review important updates, click the message to view and select the important updates to install.
  4. In the list, click the important updates for more information. Select the check boxes for any updates that you want to install, and then click OK.
  5. Click Install updates.

Adobe Updates

Adobe releases updates to patch security vulnerabilities discovered in their software which require urgent attention. These should be applied as soon as possible if applicable to your installed Adobe software. 

All Adobe security patches available are listed on the Adobe Security Bulletins and Advisories page.

Adobe Flash Player

Adobe is no longer supporting Flash Player as of December 31, 2020. In addition, Adobe has blocked Flash content from running in Flash Player as of January 12, 2021. Adobe strongly recommends all users immediately uninstall Flash Player to help protect their systems.

For more information, please visit the Adobe Flash EOL Information Page.