automatic updates

Our Windows admins configured automatic windows updates on windows 2008 r2 servers,  that running SharePoint 2010.  Previously we had issues when some of the updates broke sharepoint or other components.  Is there a guideline or a document that would show that automatic updates are not a good practice?   Looking forward to an advice from experts.
jem1662Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

KFallsSchoolsDirector of TechnologyCommented:
Especially with Windows it is not best practice to ignore updates. That being said I would never enable automatic updates in a mission critical server. I would recommend delaying installation of updates for a set amount of time. Microsoft often pulls updates when they cause problems.

This coupled with regular backups and snapshots (if virtual) will minimize update problems.
0
jem1662Author Commented:
Thank You.  That's my opinion is well.  The problem is that our admin wants to see a statement like yours from Microsoft.
0
KFallsSchoolsDirector of TechnologyCommented:
Microsoft is not going to admit that they make mistakes. There is no official document to support this opinion.

Your admin may have his reasons, and depending on your industry he may be required by law or corporate to make sure all possible security precautions ate taken.

If these reasons are non-existent then he's inflexible and playing the CYA game a little too tight. That, or he doesn't want to manage individual server updates or a WSUS server. Regardless, you may not have the power to change this situation.
0
McKnifeCommented:
Since Microsoft has given us the choice to either disable it, run it manually or automated, well, what will their position be? "It depends".
Security standpoint: do it automated.
Functionality: disable it.

It would be smart to adjust your recovery concept. Do automated updates in the most uncritical time window, perform automated tests right afterwards and if problems are detected, let those test mechanisms alarm you so that you can decide what to do.

That said: I use WSUS since win2k. Never did any testing find any problem, only in the production environment did some arise (2 in 12 years :) - one of those was sharepoint "collapsing".
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Legacy OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.