Solved

Automatic Updates on my servers

Posted on 2007-03-23
5
198 Views
Last Modified: 2010-04-20
Hi

How save is it to run Automatic Updates on your servers (2003 server, SBS 2003). Can I just go to the Windowsudate site and update all - or is there a risk factor involved??

Thanks
Jeanne
0
Comment
Question by:Jeanne_SATS
5 Comments
 
LVL 12

Expert Comment

by:StuFox100
ID: 18784583
HI Jeanne
It depends on the security of your site - if you are high secure site then any access is bad.
In general it is usually OK to access windows up from 2003 servers as it comes with IE Enhanced Security - which helps protect your server.
If you are concerned about accessing the web - you could limit access to one machine as use WSUS (http://www.microsoft.com/windowsserversystem/updateservices/default.mspx) to deploy to other servers. I would recommend that if you have numerous (3+) servers,WSUS would allow much better control.
Cheers
Stu
0
 
LVL 88

Accepted Solution

by:
rindi earned 125 total points
ID: 18784694
The main reason I don't use automatic updates on a server is that some of them reboot the server when done. Although there aren't many of those updates left, there are still such ill behaved ones. I prefer rebooting the server by myself, and therefore I turn off those automatic updates and periodically visit the windows update site manually, and select those updates I want. A further advantage of running the updates yourself is that the auto updates only installs the security relevant and important updates, while manually you can select the others too. What I don't upgrade is driver updates, as those can often cause problems.

Also, if you run the updates yourself, you are prepared for mishaps and can then return the system to a pre-update version by uninstalling just installed updates. With automatic updates if something goes wrong you'll end up being called from another important project to repair from the mishap, and in such a case you will probably not be aware that an update caused this which will bind more of your precious time.

On the other hand I've only very seldom seen a case where a windows update caused problems, and it is essential that they are applied if you want to keep the system as secure as possible.
0
 

Author Comment

by:Jeanne_SATS
ID: 18784709
Thanks guys for the advice,

now if I do the updates, do I create a restore point for the server. If so what will be the right way of making sure that if the update screws up your system, that you can go back to a point where it works?
0
 
LVL 88

Expert Comment

by:rindi
ID: 18784716
If something doesn't work, you'd just uninstall the updates through control panel, add / remove programs, and then make sure the updates check box is marked so the windows updates are shown.
0
 
LVL 4

Assisted Solution

by:Irosha
Irosha earned 125 total points
ID: 18784941
Hi

if you have few servers and Workstations i suggest you to use the WSUS for get the updates from Microsoft.in this case the main advantage is not necessary to walk each computer and run the automatic updates. WSUS always check for updates from Microsoft and prompt you to install those updates in your servers and Workstations. so if you like to install those updates you can install it.

Before installing updates in your actual environment you can deploy those updates to testing environment.
so you can check the usability of those updates.
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Every system administrator encounters once in while in a problem where the solution seems to be a needle in haystack.  My needle was an anti-virus version causing problems with my Exchange server. I have an HP DL350 with Windows Server 2008 Stand…
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Along with being a a promotional video for my three-day Annielytics Dashboard Seminor, this Micro Tutorial is an intro to Google Analytics API data.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question