Use WSUS, don't allow automatic install, but automatic download and no reboot. Decide *what* gets applied in a wsus group so every new build benefits from the work you already did once.
Then manually install when you have a maint window. I always perform a backup first, but then again most all of my infrastructure is virtualized so its trivial. jlc -----Original Message----- From: mqcarp [mailto:[email protected]] Sent: Wednesday, July 01, 2009 9:08 AM To: NT System Admin Issues Subject: Server Updates How you do you prefer to handle server OS updates? We are debating not using WSUS due to internal policy and reboot issues but could adjust the server policy to not allow the reboot. Does anyone allow the server to get updates directly? The issue I have with that is the administrative rights needed to apply the patches and or/access them. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
