[prev in list] [next in list] [prev in thread] [next in thread] 

List:       patchmanagement
Subject:    RE: Patch Mgmt Admin states WSUS and GPO cannot stop our servers from rebooting if they are on the l
From:       "Quark IT - Hilton Travis" <Hilton () QuarkIT ! com ! au>
Date:       2008-11-07 3:13:13
Message-ID: 69D384433B57A14D837F7EC9760895F72C8011 () sbs ! QuarkGroup ! local
[Download RAW message or body]

Hi Rob,

In a great many cases, delaying reboots after a patching process results
in stopped, failed and otherwise malfunctioning OS components that you
really don't want to have to make the users endure.  Test, patch,
reboot, confirm - with as little time between "patch" and "reboot" as
possible.

--

http://blog.hiltontravis.com/

Regards,

Hilton Travis                       Phone: +61 (0)7 3105 9101
(Brisbane, Australia)               Phone: +61 (0)419 792 394
Manager, Quark IT                   http://www.quarkit.com.au
         Quark Group                http://www.quarkgroup.com.au

     Microsoft SBSC PAL (Australia) http://www.sbscpal.com/

War doesn't determine who is right.  War determines who is left.

This document and any attachments are for the intended recipient 
  only.  It may contain confidential, privileged or copyright 
     material which must not be disclosed or distributed.

                    Quark Group Pty. Ltd.
      T/A Quark Automation, Quark AudioVisual, Quark IT

> -----Original Message-----
> From: Rob Slayden [mailto:rslayden@24hourfit.com]
> Sent: Saturday, 1 November 2008 4:44 AM
> 
> Hank,
> 
> Can you confirm that it is not possible to download AND install the
> patches and then postpone the restarts? That is what my testing has
> revealed and what I believe the be the case with WSUS 3 and GPOs. What
> I
> would like to do is download and install approved patches to different
> server groups and then control the restart to a particular timeframe
> later in the day. I don't believe this to be possible through GPOs and
> WSUS3. I am still trying to have that confirmed by others more
> knowledgeable about WSUS and GPOs than myself. I believe we will
> require
> some third-party patching application to provide that feature.
> 
> Thanks!
> 
> - rob
> 
> 
> -----Original Message-----
> From: Hank Arnold [mailto:arnoldhf@optonline.net]
> Sent: Friday, October 31, 2008 1:19 AM
> 
> Your PM admin needs to re-read the documentation. First off, it
doesn't
> make
> any sense to say that a GPO can't be changed. If the admin has the
> required
> permissions, *ANY* GPO setting can be changed, including Windows
> Update.
> If
> he doesn't know where to change it, let us know and one of us can
> certainly post the specific GPO setting.
> 
> As to the point of "no matter what, it will reboot.", that is simply
> not
> true. All my servers are set to download updates and notify. None of
> them
> reboots unless I tell it to do so. This is simply a matter of
> specifying the right GPO setting.
> 
> The only thing I can think of is that you all only have one GPO that
> applies
> to the entire domain. If you try to control the WSUS clients via the
> domain
> GPO, then, yes, the servers will probably reboot (assuming that is the
> way
> it is configured). You would need, then, to create a new GPO
> specifically
> applied to the servers that would have the correct update settings.
> 
> 
> Regards,
> Hank Arnold
> 
> Microsoft MVP
> Windows Server - Directory Services
> 
> 
> -----Original Message-----
> From: Razeghi, Ali [mailto:ARazeghi@decurion.com]
> Sent: Thursday, October 30, 2008 4:50 PM
> 
> Hi Team,
> 
> 
> 
> I'm having a hard time with our Patch Management process, and we are
> not
> very mature in this process yet.  Our PM (Patch Management) admin is
> stating that our servers will always reboot if a user is not
physically
> logged in, and he states this is a GPO setting, which is impossible to
> change.  He doesn't' mean we can't disable/enable that GPO, but no
> matter what, it will reboot.  Does anyone know if this is in fact the
> case?  If it is, I'll drop it and blame Microsoft for implementing a
> bad policy but I'm having a hard time believing this.  Thanks.
> 
> 
> 
> Sincerely,
> 
> Ali Razeghi
> Assoc. Database Administrator 

---
When posting or replying to messages on this list, please send all
emails in plain text format.  HTML formatted messages will not be accepted.

PatchManagement.org is hosted by Shavlik Technologies

To unsubscribe send a blank email to leave-patchmanagement@patchmanagement.org
If you are unable to unsubscribe via this email address, please email
owner-patchmanagement@patchmanagement.org

[prev in list] [next in list] [prev in thread] [next in thread]