Keeping Ten Linux PCs Safe: Updates, Backups and Remote Management

Part 7 of 8 in the Linux Business Playbook.

Earlier parts of this series covered what to run on Linux. This part covers something owners ask about more quietly: once ten staff are on Linux, who keeps those machines safe, and how much of my week will it eat?

Less than you expect, provided three things are set up on day one: updates, backups and a way for someone to see every machine without walking to it.

Updates that do not interrupt the day

Most people know the feeling of a Windows update that lands at the wrong moment and demands a restart. Linux handles this differently. Security fixes arrive little and often, install in the background, and almost never need a reboot. When one is needed, the machine shows a small notice and waits until it is next switched on.

If your business uses Ubuntu, the most common choice for offices, there is a further layer called Ubuntu Pro. It is free for up to five machines and modestly priced beyond that. It extends security coverage for each Ubuntu release to ten years, covers far more software than the standard edition, and includes Livepatch, which applies critical fixes without rebooting at all.

The practical effect: no "update Tuesday", no staff clicking "remind me later" for three months, and no machine quietly falling out of support.

What "managed" actually means

A managed fleet, in plain words, means one person can see every PC from one screen. Ubuntu Pro includes a tool called Landscape that does exactly this. From a web page, whoever looks after your IT can:

• see which machines are switched on, up to date, or overdue
• push updates and software to all of them at once, or in groups
• confirm every laptop has full-disk encryption switched on
• run a maintenance task on every machine without visiting any of them

That last point matters for lost or stolen laptops. With disk encryption turned on, the data on a lost laptop is unreadable without the password. The machine's access to your email and files can be revoked immediately, and when the laptop next connects to the internet, a remote command can lock the account and wipe what is left. The business loses a piece of hardware, not its client list.

Backups: the 3-2-1 rule in plain words

Backups are where most small businesses are weakest, on any operating system. The rule to remember is 3-2-1:

• Three copies of your data: the working copy plus two backups
• Two different kinds of storage, for example a drive in the office and a cloud service
• One copy kept somewhere else, so a fire, flood or burglary cannot take everything at once

On Linux this is simple to set up and, importantly, simple to automate so nobody has to remember. A retired office PC with a couple of large drives makes an excellent local backup box. A cloud service, whether OneDrive, Google Drive or a dedicated backup provider, covers the off-site copy.

One rule above all: a backup you have never restored is a guess, not a backup. Modern ransomware hunts for reachable backups before it reveals itself, and a 2025 industry survey found only about half of victims recovered their data from backups. So every quarter, pick a folder and restore it. Ten minutes tells you whether your safety net holds.

Do I still need antivirus?

Honestly: it is not where the risk lives. Linux has a scanner called ClamAV, useful for checking files you pass on to Windows users. But viruses are not how small businesses get hurt today. Phishing emails, reused passwords and missing two-factor authentication are.

So the security spend that pays off on a Linux fleet is the same as on any other:

• a password manager for every staff member, so no password is reused
• two-factor authentication on email, accounting and anything with client data
• a short, repeated conversation with staff about what a dodgy email looks like
• disk encryption on every laptop, which Linux offers at install time

Linux adds a quieter advantage: because so few desktop viruses target it, a bad download is far less likely to do damage.

Remote support without a site visit

Linux makes remote help easy. With the owner's permission, whoever looks after your IT can connect to a machine, see the screen, fix the problem and disconnect, while the staff member watches. Most issues on a well-set-up Linux PC are small, a printer that needs re-adding or a setting that moved, and are resolved in minutes without anyone driving across town.

Worked example: a ten-PC real estate office

A suburban real estate agency moved nine desktops and one laptop to Ubuntu. Here is what "looking after it" looks like for them.

• Backups: a retired Windows PC in the back office became the backup box. Every machine saves to the shared drive on that box, which also copies itself to the cloud overnight. Each quarter the office manager restores one folder as a test.
• Updates: all ten machines are registered in Landscape under the free Ubuntu Pro allowance for the first five plus a small subscription for the rest. The IT partner sees them on one page and pushes updates on a Thursday evening.
• The lost laptop: an agent left a laptop in a cafe. The disk was encrypted, so the data was safe. Access to email and the CRM was revoked within the hour, and a remote wipe was queued for the next time the machine went online. The agency bought a new laptop and the agent was working again the next morning from the backup.

Monthly time cost for the owner: close to nil. The IT partner spends about an hour a month on the fleet.

What still needs Windows

Some things are still Windows-only, and it is better to know before you start:

• Vendor-specific security tools. Some insurers or franchisors require a particular endpoint product that only exists for Windows.
• Compliance software. Certain industry audit tools and government lodgement helpers ship only as Windows programs, although most have moved to the web.
• Specialised hardware. Older scanners and some label or receipt printers have no Linux driver. Check each device in your audit, which Part 8 walks through.

Keeping one Windows PC for these jobs is normal, and the Linux fleet does not make it any harder to manage.

Key takeaway

Ten Linux PCs are easier to look after than ten Windows PCs, not harder. Updates arrive quietly, a free tool shows every machine on one screen, encryption and backups turn a disaster into an inconvenience, and support happens over the wire. Set those three things up on day one and the fleet largely looks after itself.

Next in the series: The 30-Day Migration Plan.

How We Help Your Business

• We set up updates, encryption and fleet visibility on every machine, so you can see at a glance that each PC is current and protected, and we monitor it for you.

• We design and automate your backups to the 3-2-1 rule, run the quarterly restore test, and provide remote support so most problems are fixed in minutes without a site visit.