Solved

switch from Core 2012 server to full 2012 Server. Would you need all updates for full server then if you switch?

Posted on 2015-01-29
5
228 Views
Last Modified: 2015-01-29
switch from Core 2012 server to full 2012 Server.

Would you need all updates for full server then if you switch from CORE to GUI? We only need to switch to GUI to verify that the server is all setup successfully as CORE server. Someone told me that they don't want to use the switch to GUI because then they would need all the updates for IE and GUI, etc?? SO, what if we need to switch to GUI only to verify the server? This is in production, would that be a security risk if you switch to GUI and have no updates for lets say 30 minutes? What is the work around to verify Server CORE then?
0
Comment
Question by:creative555
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 250 total points
ID: 40577931
There would be no security risk in doing this. However when you switch from GUI to core or from core to GUI a reboot is required. So, if this is a production server i would make note of that and do this change after hours.

If you are simply doing a verify there should be no worry about security. If you do this off hours you could also just set the local firewall to block all incoming/outgoing traffic while you do your verify (personally i think that is over kill but you can do that if you need to)

Make sure if you use the firewall method that you are sitting in front of the server and not accessing it remotely.

switch between server core and gui

Will.
0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 250 total points
ID: 40577984
I disagree - there is an increased security risk.  It may be brief and low, but for however long you have a GUI installed, if there are other systems on your network trying to exploit issues with DLLs and the like, it will increase your attack surface.  That said, I wouldn't be worried about.

And THAT said, what, exactly, are you trying to verify?  You shouldn't need to do this to verify the server is working appropriately.
0
 

Author Closing Comment

by:creative555
ID: 40578455
THank you both for the info!
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40578505
Just to clarify, I was stating that it is not a security risk in your case as I wouldn't worry about the implications if you are doing this for a short time.

Yes over time leaving the GUI online without required patches would not be security and could be at risk.

For a short period you should be fine.

Will.
0
 

Author Comment

by:creative555
ID: 40578510
Yes. Thank you so much! I agree :)
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange 2010 mailbox move 7 52
Server 2012 R2 Hyper 12 44
Windows Server 12 and Office 2016 Application 12 29
Audit Account Policy 3 40
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question