January 30, 2020 Uncategorized

Install Urgent Microsoft Windows January 2020 Monthly Security Patch


This information will be provided to hotels within the Feb. 3 Weekly Update.

Franchise Management Companies | We’d like to make you aware of a known vulnerability in Microsoft Windows and Windows Server systems and that a patch is available to protect these systems. 

On Jan.14, 2020, the National Security Agency (NSA) identified critical vulnerabilities in Microsoft Windows and Windows servers and frameworks. The vulnerabilities present risks whereby an attacker can make a malicious website or program appear legitimate. This also risks the possibility that attackers could remotely install malware on devices and/or intercept sensitive employee and guest data. 

To remediate these vulnerabilities, the NSA is recommending that network managers complete the Microsoft January 2020 monthly security patches immediately. It is critical that all franchisees install these patches promptly to maintain the security of systems and devices connected to the Marriott network, and the network itself, and is required in accordance with the IT-SEC-017 End User Computing Devices brand standard. 

Impacted Windows Systems include Windows 7/8/10, Windows Server 2008/2012/2016/2019 systems, Internet Explorer 9/10/11, .NET Frameworks, and ASP.NET Frameworks. Please see the below actions that hotels should take in order to remediate these vulnerabilities:

For servers connected to the Marriott network: 

  • If the server has a defined automatic reboot window, no action is needed. Marriott iT has deployed the patch and it will automatically be installed once a server is rebooted. 
  • If the server does not regularly automatically reboot, you should manually reboot your server as soon as possible to deploy the patch. 
    • Note: Marriott iT is currently testing the impact of these patches on servers running Opera. Until testing is complete, servers running Opera should not be patched. 

For servers and workstations that you own, manage and control:  

  • You should work with your hotel(s) and/or Franchise Technology POC to complete Microsoft’s January 2020 monthly security patches promptly. 

Thank you in advance for your support and assistance in complying with Marriott’s standards and continuing to prioritize Marriott International’s information security.