How to control security updates (see them) and which ones to allow?
Installing my first 2016 Domain Controller right now and forgot to ask how other handle updating the server (security patches from MS) without WSUS or some other form of controlling what gets installed. Is there any way to see a list similar to 2008R2 of updates available? I have used the sconfig to set it to only download updates and that seems to have worked okay (past few weeks). Should I allow the "Give me updates for other Microsoft products when I update Windows" (it is a DC -DNS,WINS, GC- but without apps like Office, etc. installed) or just go with the security updates? I am deferring feature updates!
Thanks to everyone in advance for their insights and kind assistance :-)
Much appreciated.
Thanks to everyone in advance for their insights and kind assistance :-)
Much appreciated.
ASKER
I would like something that only shows Server 2016 updates as Windows 10 is a client end o/s
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
cheers
You will see that there are very few updates. You won't have much to do selecting which to take or not and it's wise to take all of them. If you have problems, be aware that updates can be uninstalled. If problems are so big that windows cannot start, you'll need a backup as always.
"I am deferring feature updates!" - windows server does not pull feature updates by default or did you install the server as server core?
"I am deferring feature updates!" - windows server does not pull feature updates by default or did you install the server as server core?
You can use this Link for Microsoft's History of Updates:
https://support.microsoft.com/en-us/help/4043454/windows-10-windows-server-update-history