Updating Windows Server 2008 Server Core

Published on
10,229 Points
Last Modified:
Community Pick
This article will detail how to properly update a fresh install of Windows Server 2008 Server Core.  

Like any other Windows operating system, Server Core must be updated with regular patches. The limited threat profile Server Core has over the other versions of Windows is its greatest selling point. Many of the components that render Windows open to attack and even unstable are not present in Server Core.

Internet Explorer is not installed on Server Core, the Windows Update web-site is out of the question. The Windows Automatic Update client is installed, but needs to be invoked from the command line via wuauclt.

wuauclt /detectnow ~ Will check for any updates, immediately

To see the current Windows Update settings on the Server Core computer execute the following command.

cscript  c:\windows\system32\scregedit.wsf /AU /v

A value of 0 means that Automatic Updates are not configured, 4 sets the Auto download and install option. The most secure way to keep your servers up to date is with WSUS.  Server Core can be attached to WSUS in the same way as every other Windows box can be attached, through group policy.

To see the updates that are currently installed we need to use WMI.

wmic qfe list

The above syntax will list all installed updates on Server Core.  Specific updates can be sought out through their KB number, example:

systeminfo | find : KB

Uninstalling updates is not as quick and easy. The uninstaller must be packed out of the .cab file which installed it. First, you have to create a temporary directory under the directory where the update was installed. Extract the update's .cab files from .msu file into the newly created temporary directory.

expand x86-all-windows6.0-kb###### -x86_######.msu -f:* <Temporary Directory>

(#'s would be replaced by the update's KB number & hash.)

pkgmgr /up /m:windows6.0-kb######-x86.cab /quiet

The reverse would hold true if updates needed to be installed manually, but it is best to have the servers managed by WSUS.

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Join & Write a Comment

This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

Keep in touch with Experts Exchange

Tech news and trends delivered to your inbox every month