Solved

Windows Update Fevruary 2015

Posted on 2015-02-11
11
76 Views
Last Modified: 2015-02-18
Hello

I noticed on 2 different servers (2012 R2 and 2008 R2) that Windows Update of February 2015 (from yesterday or 2 days ago) take about 1 hour to setup

I applied updates on a Windows 2012 R2 server and it took more than 1 hour for the server to finish rebooting normaly

THan I noticed also on a Windows 2008 R2 server set for automatic Windows Update that updates started at 3h00 and finished at 4h03

Is that normal?

Does anyone found any problem with these updates?

THank you
0
Comment
Question by:gadsad
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
  • 2
11 Comments
 
LVL 88

Expert Comment

by:rindi
ID: 40605251
First, never do automatic updates on servers. Rather do it manually when you are there and in control of things, and so you can restore from your backups if something fails. Second, as m$ updates have encountered quite a few buggy updates the last year, which they had to remove again, I also strongly recommend to wait with your updates on servers for 1 or 2 weeks, as by that time those bugs are usually resolved.

So I suggest doing the updates manually on a weekend, and do a full OS backup before you start.

I haven't run my february updates yet, but from what I read, There are quite a lot of them and they are extensive, so you can expect it to take a long time.
0
 

Author Comment

by:gadsad
ID: 40605270
Thank you

If I wait one or 2 weeks before running updates, how can MS fix updates if they are already downloaded on the server ? You mean I should not even download updates on the server before 1 or 2 weeks so they can be fixed at Microsoft before downloading them. I guess that is they are already downloaded on the server (before installation) they cannot be changed. It that right?
0
 
LVL 88

Expert Comment

by:rindi
ID: 40605277
In the updates settings select "Check for updates but let me choose whether to download and install them".

Besides that, if they are already downloaded, you can delete the contents of "C:\Windows\SoftwareDistribution\Downloads", that's where they get downloaded to and installed from, so if they aren't there, they will be downloaded again. As that folder can use up quite a lot of space in time, deleting them also cleans up disk space.
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 29

Expert Comment

by:serialband
ID: 40606835
If you have "extra" servers, you download and install on one for testing before you update the rest.  Don't ever autoupdate a production server.  If you manually download the updates and read the disclosures, you can just disable the services being updated and update them without rebooting.  It's a good way to reduce overall system downtime.
0
 
LVL 88

Expert Comment

by:rindi
ID: 40606851
Talking of buggy updates, m$ has managed to include one of them this update Tuesday, and they have already removed it again. So it looks as if they are doing their best in keeping with the reputation they have recently built up.
0
 

Author Comment

by:gadsad
ID: 40606881
As I read your commentaries I think the best and safer thing will be NOT to update Windows and Not to install updates

Just check antivirus.

What do you think about NOT updating Windows Server 2008 and 2012 ?
0
 
LVL 88

Expert Comment

by:rindi
ID: 40606914
You should run the updates, just don't do it on patch Tuesday, but rather wait 1 or 2 weeks. Not updating is a very bad idea.
0
 
LVL 29

Expert Comment

by:serialband
ID: 40607042
I would download on that Tuesday, or just set your auto update to download only, but don't patch right away.  If you have extra or spare systems to do testing, then use them to test the patches before actually patching your production servers.  If not, then let others with extra servers test the patches and report the bugs first.  Once the dust settles and the problems are discovered and fixed, then patch your systems.  Don't leave them unpatched too long.  Be sure to have your systems behind a firewall.
0
 

Author Comment

by:gadsad
ID: 40607405
Ok for letting others patch first and report bugs before patching myself buy:

1) if bugs are reported how can I change the bugged patch for the good one if it has already been downloaded on the server?
2) How do I know that a patch is bugged? looking through the internet will not be easy. Is there a way or a site to know bugged patchs?
 
Tks
0
 
LVL 88

Accepted Solution

by:
rindi earned 500 total points
ID: 40607487
As I mentioned earlier, I wouldn't download them automatically, but rather use the setting I suggested, where you get notified about available updates, but you decide when to download and install them. Also as I mentioned, already, if they are already downloaded, you can delete them in the SoftwareDistribution\Downloads folder.
0
 

Author Closing Comment

by:gadsad
ID: 40617607
thanks
0

Featured Post

Salesforce Made Easy to Use

On-screen guidance at the moment of need enables you & your employees to focus on the core, you can now boost your adoption rates swiftly and simply with one easy tool.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article will review the basic installation and configuration for Windows Software Update Services (WSUS) in a Windows 2012 R2 environment.  WSUS is a Microsoft tool that allows administrators to manage and control updates to be approved and ins…
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question