[THIN] Re: M$ Patching...
- From: "Schneider, Chad M" <CMSchneider@xxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Tue, 23 Aug 2005 11:17:06 -0500
I will see if I can get the SUS team to install the patches...at a time of
my request.
Currently, we allow SUS to download the patches to most servers (not Citrix)
and they are still manually installed.
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeff Pitsch
Sent: Tuesday, August 23, 2005 11:11 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: M$ Patching...
So make the window shorter. Fit it to your environment. Sheesh. My point
being there are ways to do this without having to manually install patches,
without having windows update affect users, without you having to be there
to do this manually. Look beyond 'what has always worked'. Maybe it's time
for a change. Things change and sometimes you have to roll with them.
Jeff
On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote:
> So my servers and applications would be unavailable for @ 2 hours
> (5:30PM-7:15PM)....that will not fly.
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf Of Jeff Pitsch
> Sent: Tuesday, August 23, 2005 10:49 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: M$ Patching...
>
> So script it. At xPM, disable logins, send messages about servers
> going down, kick users out, schedule the patch download/install at
> 5:30. By 7pm your all set. Use SUS (Free as in beer) so you can pick
> which patches get applied.
>
> Jeff
>
> On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote:
> > Yes, we reboot all 70, minus a handful in other time zones, @ 7PM on
Sun.
> > nights.
> > What we had done the last 4 years, is install the patches, during
> > the week, and wait for the servers to reboot on Sun. night. Worked
> > fine for
> years.
> >
> > I manually install the patches, so to try to manually install the
> > patches, on 70 servers, notifying users, kicking users out,
> > disabling servers, etc, takes a great deal of time. In the midst of
> > all of that....any server I patch, until the reboot, will get the
> > prompt for each
> user's session.
> >
> > -----Original Message-----
> > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]
> > On Behalf Of Jeff Pitsch
> > Sent: Tuesday, August 23, 2005 10:31 AM
> > To: thin@xxxxxxxxxxxxx
> > Subject: [THIN] Re: M$ Patching...
> >
> > So how do you do it now? You must have a rolling schedule for the
> > updates, correct? I highly doubt your rebooting all 70 servers at
> > the same time. It doesn't take that much more time to schedule the
> > downloads around the reboot times for the servers. What if the
> > updates require an update to HKCU? how do you take care of that?
> >
> > Jeff Pitsch
> >
> > On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote:
> > > 24x7 shop, 250+ applications, 70 servers....I would have to
> > > schedule weeks of time, off hours, to disable
> > > servers/applications, install patches, reboot servers, install CTX
> > > patches for the installed M$ patches, reboot again, enable
> > > servers....would take weeks to complete, if I did nothing else,
> > > during my evneings/off hours, and M$ patches are released so
frequently, that would be my only job.....
> > >
> > > We do weekly reboots.
> > >
> > > -----Original Message-----
> > > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Jeff Pitsch
> > > Sent: Tuesday, August 23, 2005 10:18 AM
> > > To: thin@xxxxxxxxxxxxx
> > > Subject: [THIN] Re: M$ Patching...
> > >
> > > Don't do updates until you can reboot the servers? Don't do
> > > updates while users are on the servers?
> > >
> > > Jeff
> > >
> > > On 8/23/05, Tasita Ebacher <tebacher@xxxxxxxxxxxxxxxxxxxxx> wrote:
> > > > Jim, I don't think ANY of those GP options solve this issue!
> > > >
> > > > I've been trying to solve this issue for months now! All my
> > > > Terminal Services uses get the "Updating your computer is almost
> > > > complete. You must restart your computer for the updates to take
> > > > effect. Restart now, Restart Later" pop-up with the buttons
> > > > grayed out so they can't even close the window!
> > > >
> > > > I don't even have "Computer Configuration\Administrative
> > > > Templates\Windows Components\Windows Update - Do not display
> > > > Install and Shutdown" in my GP... (isn't this for XP SP2?)
> > > >
> > > > I have "Computer Configuration\Admin Templates\Windows
> > > > Components\Windows Update - Allow non-administrators to receive
> > > > update notifications" set to Disabled. This only prevents users
> > > > from receiving the actual prompts to update windows, not the
> > > > restart
> prompts.
> > > >
> > > > I have "Computer Configuration\Admin Templates\Windows
> > > > Components\Windows Update - No auto-restart for scheduled
> > > > Automatic Updates installations" set to Enabled, which will just
> > > > cause the computer to ask the user to restart rather than just
> > > > rebooting on it's own.
> > > >
> > > > And, after all this, my users STILL get the reboot-prompt pop-up.
> > > > So, is there actually a way to prevent this?
> > > >
> > > > Tasita Ebacher
> > > > 702 Communications
> > > > Data Systems Engineer
> > > > CCNA
> > > >
> > > >
> > > > On 23/08/05, Jim Kenzig Kenzig.com <jkenzig@xxxxxxxxx> wrote:
> > > > >
> > > > > Aaaargh is it here?:
> > > > >
> > > > > The policies are accessed in the Computer
> > > > > Configuration\Administrative Templates\Windows
> > > > > Components\Windows Update node of Group Policy Object
> > > > > Editor.Do not display Install and
> > > > Shutdown option.
> > > > >
> > > > > here?:
> > > > >
> > > > >
> > > > > Computer, Admin Templates, Windows Components, Windows Update.
> > > > >
> > > > > In particular, "Allow non-administrators to receive update
> > > > notifications"
> > > > >
> > > > > or here?
> > > > > Computer Config-> Admin Templates-> Windows Components->
> > > > > Windows Update
> > > > >
> > > > > Set "No auto-restart for scheduled Automatic Updates
installations"
> > > > > to
> > > >
> > > > > Enabled
> > > > >
> > > > > Group policy is such a pain in th butt!
> > > > > JK
> > > > >
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > ________________________________
> > > > >
> > > > > From: thin-bounce@xxxxxxxxxxxxx
> > > > > [mailto:thin-bounce@xxxxxxxxxxxxx]
> > > > > On Behalf Of Jim Kenzig Kenzig.com
> > > > > Sent: Tuesday, August 23, 2005 8:50 AM
> > > > > To: thin@xxxxxxxxxxxxx
> > > > > Subject: [THIN] Re: M$ Patching...
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Where is this specifically?...I'd like to write an FAQ item on
> > > > > this
> > > > one.
> > > > > We've had the same problem since we went to Windows 2003 Server.
> > > > > So we
> > > >
> > > > > can't be alone.
> > > > > Jim
> > > > >
> > > > > Dogers <dogers@xxxxxxxxx> wrote:
> > > > >
> > > > > You'll want to have a look at the GP options for the update
> > > > > service
> > > > > - you can force the reboot message not to show for users
> > > > >
> > > > > >
> > > > ********************************************************
> > > > This Weeks Sponsor: triCerat Inc.
> > > > You need Day Zero Protection!
> > > > Get Proactive with triCerat's Simplify Suite.
> > > > Solve printing, security and profile problems before they occur.
> > > > http://www.tricerat.com/?thethintl2
> > > > **********************************************************
> > > > Useful Thin Client Computing Links are available at:
> > > > http://thin.net/links.cfm
> > > > ThinWiki community - Excellent SBC Search Capabilities!
> > > > http://www.thinwiki.com
> > > > ***********************************************************
> > > > For Archives, to Unsubscribe, Subscribe or set Digest or
> > > > Vacation mode use the below link:
> > > > http://thin.net/citrixlist.cfm
> > > > ********************************************************
> > > > This Weeks Sponsor: triCerat Inc.
> > > > You need Day Zero Protection!
> > > > Get Proactive with triCerat's Simplify Suite.
> > > > Solve printing, security and profile problems before they occur.
> > > > http://www.tricerat.com/?thethintl2
> > > > **********************************************************
> > > > Useful Thin Client Computing Links are available at:
> > > > http://thin.net/links.cfm
> > > > ThinWiki community - Excellent SBC Search Capabilities!
> > > > http://www.thinwiki.com
> > > > ***********************************************************
> > > > For Archives, to Unsubscribe, Subscribe or set Digest or
> > > > Vacation mode use the below link:
> > > > http://thin.net/citrixlist.cfm
> > > > ********************************************************
> > > > This Weeks Sponsor: triCerat Inc.
> > > > You need Day Zero Protection!
> > > > Get Proactive with triCerat's Simplify Suite.
> > > > Solve printing, security and profile problems before they occur.
> > > > http://www.tricerat.com/?thethintl2
> > > > **********************************************************
> > > > Useful Thin Client Computing Links are available at:
> > > > http://thin.net/links.cfm
> > > > ThinWiki community - Excellent SBC Search Capabilities!
> > > > http://www.thinwiki.com
> > > > ***********************************************************
> > > > For Archives, to Unsubscribe, Subscribe or set Digest or
> > > > Vacation mode use the below link:
> > > > http://thin.net/citrixlist.cfm
> > > >
> > > ********************************************************
> > > This Weeks Sponsor: triCerat Inc.
> > > You need Day Zero Protection!
> > > Get Proactive with triCerat's Simplify Suite.
> > > Solve printing, security and profile problems before they occur.
> > > http://www.tricerat.com/?thethintl2
> > > **********************************************************
> > > Useful Thin Client Computing Links are available at:
> > > http://thin.net/links.cfm
> > > ThinWiki community - Excellent SBC Search Capabilities!
> > > http://www.thinwiki.com
> > > ***********************************************************
> > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation
> > > mode use the below link:
> > > http://thin.net/citrixlist.cfm
> > >
> > > ********************************************************
> > > This Weeks Sponsor: triCerat Inc.
> > > You need Day Zero Protection!
> > > Get Proactive with triCerat's Simplify Suite.
> > > Solve printing, security and profile problems before they occur.
> > > http://www.tricerat.com/?thethintl2
> > > **********************************************************
> > > Useful Thin Client Computing Links are available at:
> > > http://thin.net/links.cfm
> > > ThinWiki community - Excellent SBC Search Capabilities!
> > > http://www.thinwiki.com
> > > ***********************************************************
> > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation
> > > mode use the below link:
> > > http://thin.net/citrixlist.cfm
> > >
> > ********************************************************
> > This Weeks Sponsor: triCerat Inc.
> > You need Day Zero Protection!
> > Get Proactive with triCerat's Simplify Suite.
> > Solve printing, security and profile problems before they occur.
> > http://www.tricerat.com/?thethintl2
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation
> > mode use the below link:
> > http://thin.net/citrixlist.cfm
> >
> > ********************************************************
> > This Weeks Sponsor: triCerat Inc.
> > You need Day Zero Protection!
> > Get Proactive with triCerat's Simplify Suite.
> > Solve printing, security and profile problems before they occur.
> > http://www.tricerat.com/?thethintl2
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation
> > mode use the below link:
> > http://thin.net/citrixlist.cfm
> >
> ********************************************************
> This Weeks Sponsor: triCerat Inc.
> You need Day Zero Protection!
> Get Proactive with triCerat's Simplify Suite.
> Solve printing, security and profile problems before they occur.
> http://www.tricerat.com/?thethintl2
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
> use the below link:
> http://thin.net/citrixlist.cfm
>
> ********************************************************
> This Weeks Sponsor: triCerat Inc.
> You need Day Zero Protection!
> Get Proactive with triCerat's Simplify Suite.
> Solve printing, security and profile problems before they occur.
> http://www.tricerat.com/?thethintl2
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode
> use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
