Re: installing security patches on a Windows database server (was"Oracle 10g for Windows")
- From: Jeff Herrick <jherrick@xxxxxxx>
- To: "Oracle-L (E-mail)" <oracle-l@xxxxxxxxxxxxx>
- Date: Thu, 12 Feb 2004 15:22:26 -0500 (EST)
Most patches have a 'silent' as well as a 'no-reboot' option. The
problem is that they are not always the same for all patches so
you have to run the patch from a command line first with the
'/?' option to discover them (usually /S and /X but it varies)
With these options you can copy the patch to multiple servers
and then remotely execute using something like PSEXEC from
SysInternals. After this is done the reboots can be scheduled
based on a balance between required availability of the server
and the critical nature or risk exposure of the problem that the
patch fixes.
Of course you should also have tested the patch before rolling it
out =8-0
Multiple patches that would normally require a series of reboots can
be 'chained' together using the QCHAIN program available from the
Microsoft KB. This way only one reboot of your production server(s)
is necessary. Note that only QCHAIN has the smarts to determine
which DLL versions are to be swapped around. If you just strung a set
of patches together using /quiet /noreboot you risk having a broken
O/S after the reboot
HTH
Jeff Herrick
On Thu, 12 Feb 2004, Jacques Kilchoer wrote:
> I'm sure that with proper management etc. a Windows database server can =
> be reliable. But one thing that puzzles me - when you install a =
> Microsoft security patch, the dialog box at the end (almost) always says =
> "Reboot the machine now." I religiously do that since all of my Windows =
> databases can be brought down (they're used for development.) What do =
> people do with a production database server?
>
> > -----Original Message-----
> > Mercadante, Thomas F
> >=20
> > ...
> >=20
> > I have windows databases that have been running for 3 years=20
> > now. *Never*
> > does the machine crash. And *never* do we reboot "just=20
> > because we should".
> >=20
> > ...
> ----------------------------------------------------------------
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> ----------------------------------------------------------------
> To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
> put 'unsubscribe' in the subject line.
> --
> Archives are at //www.freelists.org/archives/oracle-l/
> FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
> -----------------------------------------------------------------
>
----------------------------------------------------------------
Please see the official ORACLE-L FAQ: http://www.orafaq.com
----------------------------------------------------------------
To unsubscribe send email to: oracle-l-request@xxxxxxxxxxxxx
put 'unsubscribe' in the subject line.
--
Archives are at //www.freelists.org/archives/oracle-l/
FAQ is at //www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Other related posts:
