• State Not Answered
  • +2 person also asked this people also asked this
  • Replies 3 replies
  • Subscribers 14 subscribers
  • Views 734 views
  • Users 0 members are here
Options
Related

Microsoft Patch management

Geoff Brown

I am trying to find an effective solution to Microsoft patch management. A WSUS server looks to be an option, but this would require manual checks with the list of validated patches in Security Central. Is this what others are using?

Parents
  • 0

    Some additional information,

    Along with setting up a WSUS server and monitoring the Security Central site for Supported updates, many customers also implement the following processes to minimize the impact of issues with Windows updates or related system changes.

    • Control and limit MS Updates to off hours or during scheduled maintenance downtime for your Production environment.
      • If you have a monthly or quarterly process for System maintenance, installing updates during this time frame would be less impactful when system reboots are required.
    • For more critical operations, many customers also setup a small staging system with duplicate applications where MS updates, patches and Service packs can be installed and tested prior to rolling out to a production system. This is just an extra safeguard to ensure there are no surprises when updating the actual production system.
Reply
  • 0

    Some additional information,

    Along with setting up a WSUS server and monitoring the Security Central site for Supported updates, many customers also implement the following processes to minimize the impact of issues with Windows updates or related system changes.

    • Control and limit MS Updates to off hours or during scheduled maintenance downtime for your Production environment.
      • If you have a monthly or quarterly process for System maintenance, installing updates during this time frame would be less impactful when system reboots are required.
    • For more critical operations, many customers also setup a small staging system with duplicate applications where MS updates, patches and Service packs can be installed and tested prior to rolling out to a production system. This is just an extra safeguard to ensure there are no surprises when updating the actual production system.
Children
No Data