Monthly, if the patches warrant it. For example, we skipped the Critical IE patch in January for our servers and waited until our February maintenance window for it. The reasoning was that we rarely use IE on any of the servers and felt like the threat was low. Our process is that we meet each Wednesday after the MS patch release to review them. We look them over and discuss possible application impacts. If we think there is a risk (i.e. January's MDAC patch) to our applications we bring in the developers to have a look and discuss. When then immediately begin testing and rolling out the patch to infrastructure servers (i.e. web filtering, remote SMS, etc) to see what if any impact there is. If everything looks good ~7-10 days later we roll the patch into production. Here is a link to a interesting report someone did on the timing of patching: http://nxnw.org/~steve/papers/lisa2002-time-to-patch.pdf Mike Bollman Network Engineer Enterprise Products mbollman@xxxxxxxxx -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of David Demers Sent: Wednesday, February 25, 2004 11:34 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Common Frequency of Server Updates How often do you guys update your servers? Daily, Weekly, monthly, =3D Quaterly, or "as needed for problems" I'm creating a schedule for doing periodic server maintenance, and I'm = =3D hoping to see your thoughts on this topic before I make my decisions. = =3D Since the up-rise of security holes makes the "If it ain't broke don't = =3D fix it" mentality very dangerous, we are now forced to face the patch = =3D and maybe break the server issue. ******************************************************** This weeks sponsor triCerat Inc. triCerat makes your job easier by offering essential applications to eliminate your printing, policy and profile, and your application management problems. http://www.triCerat.com=20 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This weeks sponsor triCerat Inc. triCerat makes your job easier by offering essential applications to eliminate your printing, policy and profile, and your application management problems. http://www.triCerat.com ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm