We use SCCM for our servers. Patches released on Tuesday. - Meeting evaluate Deploy to development environment on Wednesday Deploy to Test environment on Thursday Deploy to production on Saturday
At any time screaming people can throw a wrench if a real problem is discovered. Some servers or groupings are on a slightly different schedule for somethings (telecom) but for the most part we deploy on over a thousands servers with this schedule. Generally 'problems' turn out to be isolated to 'NOT the patch'. Steven On Thu, Jun 10, 2010 at 12:05 PM, paul d <pdw1...@hotmail.com> wrote: > I pretty much do the same here. Auto download, manual reboot. > However, it's a hospital so I arrange downtime with all the departments > (since the clinical software will be off-line during the downtime). > For desktops, I use Shavlik which allows me to patch non-MS products. > >> From: kennedy...@elyriaschools.org >> To: ntsysadmin@lyris.sunbelt-software.com >> Date: Thu, 10 Jun 2010 12:47:03 -0400 >> Subject: RE: Patch Management - again >> >> On the server side that won't change much....I don't think you want >> download and install automatically as a server option. I have my servers set >> to download but not install. Then I hit each one and tell it to install, so >> you skip the step of downloading on each server that is already done..... >> >> >> >> >> -----Original Message----- >> From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] >> Sent: Thursday, June 10, 2010 12:18 PM >> To: NT System Admin Issues >> Subject: Re: Patch Management - again >> >> I currently have 67 boxes that I patch manually each month, ranging from >> XP to 2k8R2. It's actually kind of nice, at the moment, as I do it at night >> from home, through a VPN back to the office. >> >> >>> Phil Brutsche <p...@optimumdata.com> 6/10/2010 9:15 AM >>> >> +1 >> >> I get nightmares thinking about what it was like before. >> >> On 6/10/2010 10:29 AM, Ben Scott wrote: >> > On Thu, Jun 10, 2010 at 11:17 AM, Joseph Heaton <jhea...@dfg.ca.gov> >> > wrote: >> >> What are you guys using for automating patch management for your >> >> servers? >> > >> > WSUS. >> >> -- >> >> Phil Brutsche >> p...@optimumdata.com >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ >> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ >> <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> >> >> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >> > > ________________________________ > Hotmail is redefining busy with tools for the New Busy. Get more from your > inbox. See how. > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
