Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 245
  • Last Modified:

automatic updates

Our Windows admins configured automatic windows updates on windows 2008 r2 servers,  that running SharePoint 2010.  Previously we had issues when some of the updates broke sharepoint or other components.  Is there a guideline or a document that would show that automatic updates are not a good practice?   Looking forward to an advice from experts.
0
jem1662
Asked:
jem1662
  • 2
2 Solutions
 
KFallsSchoolsCommented:
Especially with Windows it is not best practice to ignore updates. That being said I would never enable automatic updates in a mission critical server. I would recommend delaying installation of updates for a set amount of time. Microsoft often pulls updates when they cause problems.

This coupled with regular backups and snapshots (if virtual) will minimize update problems.
0
 
jem1662Author Commented:
Thank You.  That's my opinion is well.  The problem is that our admin wants to see a statement like yours from Microsoft.
0
 
KFallsSchoolsCommented:
Microsoft is not going to admit that they make mistakes. There is no official document to support this opinion.

Your admin may have his reasons, and depending on your industry he may be required by law or corporate to make sure all possible security precautions ate taken.

If these reasons are non-existent then he's inflexible and playing the CYA game a little too tight. That, or he doesn't want to manage individual server updates or a WSUS server. Regardless, you may not have the power to change this situation.
0
 
McKnifeCommented:
Since Microsoft has given us the choice to either disable it, run it manually or automated, well, what will their position be? "It depends".
Security standpoint: do it automated.
Functionality: disable it.

It would be smart to adjust your recovery concept. Do automated updates in the most uncritical time window, perform automated tests right afterwards and if problems are detected, let those test mechanisms alarm you so that you can decide what to do.

That said: I use WSUS since win2k. Never did any testing find any problem, only in the production environment did some arise (2 in 12 years :) - one of those was sharepoint "collapsing".
0

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now