RE: WSUS question

What I've seen folks do is set a GPO the morning they're going to release the patches with a tight (like 15-30 minute) reboot window and then release the patches a few hours later. The next morning they go and remove the reboot window GPO. Kind of a kludge but it works. Thanks, Brian Desmond br

RE: WSUS question

.3132 -Original Message- From: Andy Ognenoff [mailto:andyognen...@gmail.com] Sent: Monday, October 05, 2009 12:37 PM To: NT System Admin Issues Subject: RE: WSUS question >Shavlik is what we're currently using. Looking to move away from it, >possibly. Any particular reason? I'

RE: WSUS question

The price jump was the predominant reason. I was told that it doubled, or maybe more, I can't remember exactly now... >>> "Andy Ognenoff" 10/5/2009 10:37 AM >>> >Shavlik is what we're currently using. Looking to move away from it, >possibly. Any particular reason? I'm afraid of what the renew

RE: WSUS question

>Shavlik is what we're currently using. Looking to move away from it, >possibly. Any particular reason? I'm afraid of what the renewal cost will be now that they are including Vipre. - Andy O. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~

RE: WSUS question

Shavlik is what we're currently using. Looking to move away from it, possibly. >>> "Andy Ognenoff" 10/5/2009 10:01 AM >>> I use Shavlik for Workstations and Servers. Workstations get updates within a day of release and servers I wait at least 2 weeks unless it's a critical with active exploitati

RE: WSUS question

I use Shavlik for Workstations and Servers. Workstations get updates within a day of release and servers I wait at least 2 weeks unless it's a critical with active exploitation type vulnerability. Using Shavlik the way I do for servers allows me to "manually" patch them without visiting each serve

Re: WSUS question

No use auto-restarts. Only Notification for Install, except Definition and Manual restart. From practice - it is more safe. Handled by GPO Anatoly Podgoretsky - Original Message - From: "Jay Dale" To: "NT System Admin Issues" Manual updates. -Original Message- From: Joseph

RE: WSUS question

Manual updates. -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Thursday, October 01, 2009 3:59 PM To: NT System Admin Issues Subject: RE: WSUS question So what do you use now? >>> "Jay Dale" 10/1/2009 10:59 AM >>> Got burned with

RE: WSUS question

So what do you use now? >>> "Jay Dale" 10/1/2009 10:59 AM >>> Got burned with WSUS after finding out that even if you tell it not to restart, if the update applied is old enough, it will restart anyways...:( Jay -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: T

RE: WSUS question

-Original Message- From: Jay Dale [mailto:jd...@xpresstel.com] Sent: Thursday, October 01, 2009 1:00 PM To: NT System Admin Issues Subject: RE: WSUS question Got burned with WSUS after finding out that even if you tell it not to restart, if the update applied is old enough, it will restart

RE: WSUS question

Got burned with WSUS after finding out that even if you tell it not to restart, if the update applied is old enough, it will restart anyways...:( Jay -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Tuesday, September 29, 2009 12:04 PM To: NT System Admin Issues S

RE: WSUS question

er 29, 2009 5:20 PM > To: NT System Admin Issues > Subject: Re: WSUS question > > On Tue, Sep 29, 2009 at 1:08 PM, Sam Cayze > wrote: > > Use GPO's to control it.  I always use "Auto download and notify for > > install." for servers. > > +1 / &q

RE: WSUS question

later that day. Sam -Original Message- From: Ben Scott [mailto:mailvor...@gmail.com] Sent: Tuesday, September 29, 2009 4:20 PM To: NT System Admin Issues Subject: Re: WSUS question On Tue, Sep 29, 2009 at 1:08 PM, Sam Cayze wrote: > Use GPO's to control it.  I always use "Auto downloa

Re: WSUS question

On Tue, Sep 29, 2009 at 1:08 PM, Sam Cayze wrote: > Use GPO's to control it.  I always use "Auto download and notify for > install." for servers. +1 / "Me too!" / etc. Workstations get patches approved practically immediately and get install forced. Servers, I watch for any known issues o

Re: WSUS question

Thanks for that info, I had never even thought about a separate GPO for the servers (I should have) I just got that taken care of. James - Original Message - From: Sam Cayze To: NT System Admin Issues Sent: Tuesday, September 29, 2009 1:08 PM Subject: RE: WSUS question

Re: WSUS question

No, but I always apply pending updates before I release any others from WSUS, so I wouldn't notice that behavior. On Tue, Sep 29, 2009 at 3:27 PM, Brougham Baker wrote: > From: "Jonathan Link" > >> +1 >> Workstations get auto-restart, servers get download only and I determine >> when to apply t

Re: WSUS question

From: "Jonathan Link" +1 Workstations get auto-restart, servers get download only and I determine when to apply the updates. Have you ever seen coruption to the downloaded files if they get superceded before being applied? I started going down the same route as you but switched to notify for

RE: WSUS question

2009 1:29 PM To: NT System Admin Issues Subject: RE: WSUS question Naahh. Why bother? There is one thing that I recommend new WSUSers wrap their heads around when deploying and running it for the first time. If you do image based deployment of new computers (including using templates to deplo

RE: WSUS question

2009 1:41 PM To: NT System Admin Issues Subject: RE: WSUS question Instructions??? You want me to read the instructions? Aww man... >>> "Richard Stovall" 9/29/2009 10:35 AM >>> Correct. See page 32 of the deployment guide. http://www.microsoft.com/downloads/deta

RE: WSUS question

We handle our servers similarly. -Original Message- From: Richard Stovall [mailto:richard.stov...@researchdata.com] Sent: Tuesday, September 29, 2009 12:13 PM To: NT System Admin Issues Subject: RE: WSUS question I use WSUS for servers and workstations. I've got OUs for diff

RE: WSUS question

ylang=en -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Tuesday, September 29, 2009 1:24 PM To: NT System Admin Issues Subject: RE: WSUS question That's what I was thinking, thanks to all that suggested that method. One last, possibly silly, question/v

RE: WSUS question

dmin Issues Subject: RE: WSUS question That's what I was thinking, thanks to all that suggested that method. One last, possibly silly, question/verification: When I'm setting up the redirection to go to the server, since we used the custom WSUS website during install, the path w

RE: WSUS question

That's what I was thinking, thanks to all that suggested that method. One last, possibly silly, question/verification: When I'm setting up the redirection to go to the server, since we used the custom WSUS website during install, the path would be http(s)://servername:8530(8531) Is that correc

Re: WSUS question

+1 -*ASB*: http://XeeSM.com/AndrewBaker Providing Competitive Advantage through Effective IT Leadership On Tue, Sep 29, 2009 at 1:20 PM, Jonathan Link wrote: > +1 > Workstations get auto-restart, servers get download only and I determine > when to apply the upd

Re: WSUS question

+1 Workstations get auto-restart, servers get download only and I determine when to apply the updates. On Tue, Sep 29, 2009 at 1:08 PM, Sam Cayze wrote: > Use GPO's to control it. I always use "Auto download and notify for > install." for servers. > > *To configure the behavior of Automatic Up

RE: WSUS question

I use WSUS for servers and workstations. I've got OUs for different machine types. The server OU has a policy setting of "3 - Auto download and notify for install." The machines get the updates I approve and when I can open a maintenance window I install the updates and restart manually. A smal

RE: WSUS question

Question came up on the SCCM list yesterday, too... http://myitforum.com/cs2/blogs/smslist/archive/2009/09/28/fw-mssms-re-softwa re-updates-and-server-reboot.aspx -Original Message- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Tuesday, September 29, 2009 1:04 PM To: NT System A

Re: WSUS question

We use GFI for our servers because we can control the reboots. On Tue, Sep 29, 2009 at 12:04 PM, Joseph Heaton wrote: > Do you guys use WSUS for server updates? > > If so, how do you handle auto-restarts? We don't want any automatic > restarts based on updates, we want notification that it need

RE: WSUS question

Use GPO's to control it. I always use "Auto download and notify for install." for servers. To configure the behavior of Automatic Updates 1. In Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Upda

Re: WSUS question

default instance). First mode isolate each instance, second one conserve a resources. Anatoly Podgoretsky http://www.podgoretsky.com - Original Message - From: Miller Bonnie L. To: NT System Admin Issues Sent: Monday, June 23, 2008 6:04 PM Subject: RE: WSUS question Joe-I&#

RE: WSUS question

riday, June 20, 2008 7:28 AM To: NT System Admin Issues Subject: RE: WSUS question When we do this, should I delete the database in the new install location after detaching from it, then copy the old one in, then attach? Joe Heaton From: Michael B. Smith [mailto:[

RE: WSUS question

Issues Subject: RE: WSUS question Sp_detachdb Sp_attach_single_file_db Best to get your DBA involved if you aren't comfortable with t-sql. Regards, Michael B. Smith MCITP:EM/MCSE/Exchange MVP http://TheEssentialExchange.com From: Joe Heaton [mailto:[EMAIL PROTECTED]

Re: WSUS question

One set of steps would be something along the lines of: 1) download and install SQL Server Management Express, link may be wrapped: http://www.microsoft.com/downloads/details.aspx?FamilyID=c243a5ae-4bd1-4e3d-94b8-5a0f62bf7796&displaylang=en 2) stop the Updates Services service 3) Detach the curren

RE: WSUS question

PM To: NT System Admin Issues Subject: RE: WSUS question Well, I found the old susdb.mdf, it is in fact in a different folder. Any idea if it is possible to have WSUS connect to it, instead of using the blank database it created on install? Joe Heaton _ From: Damien Solodow [m

RE: WSUS question

, June 19, 2008 2:59 PM To: NT System Admin Issues Subject: RE: WSUS question I think it's susdb.mdf, but you probably don't have many mdf files on the server in the first place. From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2008 5:56 PM To: NT System Admin Issu

RE: WSUS question

I think it's susdb.mdf, but you probably don't have many mdf files on the server in the first place. From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2008 5:56 PM To: NT System Admin Issues Subject: WSUS question Well, my DB manager got a bit over-zealous a few weeks ago

RE: WSUS question

Thanks Ken, I didn't know about the column Learned something From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: March 7, 2008 9:10 AM To: NT System Admin Issues Subject: RE: WSUS question If you approve both, it will download both There is a "Server Cleanup" o

RE: WSUS question

If you approve both, it will download both There is a "Server Cleanup" option under the Options node that lets you cleanup superceded updates (this is how you remove superceded updates from your WSUS cache) But the best thing to do, if you plan to deploy SP2, is to sort your updates by Superce