[THIN] Re: M$ Patching...

  • From: "Schneider, Chad M" <CMSchneider@xxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Tue, 23 Aug 2005 10:41:44 -0500

Yes, we reboot all 70, minus a handful in other time zones, @ 7PM on Sun.
nights.
What we had done the last 4 years, is install the patches, during the week,
and wait for the servers to reboot on Sun. night.  Worked fine for years. 

I manually install the patches, so to try to manually install the patches,
on 70 servers, notifying users, kicking users out, disabling servers, etc,
takes a great deal of time.  In the midst of all of that....any server I
patch, until the reboot, will get the prompt for each user's session.

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Jeff Pitsch
Sent: Tuesday, August 23, 2005 10:31 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: M$ Patching...

So how do you do it now?  You must have a rolling schedule for the updates,
correct?  I highly doubt your rebooting all 70 servers at the same time.  It
doesn't take that much more time to schedule the downloads around the reboot
times for the servers.  What if the updates require an update to HKCU?  how
do you take care of that?

Jeff Pitsch

On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote:
> 24x7 shop, 250+ applications, 70 servers....I would have to schedule 
> weeks of time, off hours, to disable servers/applications, install 
> patches, reboot servers, install CTX patches for the installed M$ 
> patches, reboot again, enable servers....would take weeks to complete, 
> if I did nothing else, during my evneings/off hours, and M$ patches 
> are released so frequently, that would be my only job.....
> 
> We do weekly reboots.
> 
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On 
> Behalf Of Jeff Pitsch
> Sent: Tuesday, August 23, 2005 10:18 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: M$ Patching...
> 
> Don't do updates until you can reboot the servers?  Don't do updates 
> while users are on the servers?
> 
> Jeff
> 
> On 8/23/05, Tasita Ebacher <tebacher@xxxxxxxxxxxxxxxxxxxxx> wrote:
> > Jim, I don't think ANY of those GP options solve this issue!
> >
> > I've been trying to solve this issue for months now!  All my 
> > Terminal Services uses get the "Updating your computer is almost 
> > complete. You must restart your computer for the updates to take 
> > effect.  Restart now, Restart Later" pop-up with the buttons grayed 
> > out so they can't even close the window!
> >
> > I don't even have "Computer Configuration\Administrative 
> > Templates\Windows Components\Windows Update - Do not display Install 
> > and Shutdown" in my GP... (isn't this for XP SP2?)
> >
> > I have "Computer Configuration\Admin Templates\Windows 
> > Components\Windows Update - Allow non-administrators to receive 
> > update notifications" set to Disabled. This only prevents users from 
> > receiving the actual prompts to update windows, not the restart prompts.
> >
> > I have "Computer Configuration\Admin Templates\Windows 
> > Components\Windows Update - No auto-restart for scheduled Automatic 
> > Updates installations" set to Enabled, which will just cause the 
> > computer to ask the user to restart rather than just rebooting on 
> > it's own.
> >
> > And, after all this, my users STILL get the reboot-prompt pop-up.  
> > So, is there actually a way to prevent this?
> >
> > Tasita Ebacher
> > 702 Communications
> > Data Systems Engineer
> > CCNA
> >
> >
> > On 23/08/05, Jim Kenzig Kenzig.com <jkenzig@xxxxxxxxx> wrote:
> > >
> > > Aaaargh is it here?:
> > >
> > >  The policies are accessed in the Computer 
> > > Configuration\Administrative Templates\Windows Components\Windows 
> > > Update node of Group Policy Object Editor.Do not display Install 
> > > and
> > Shutdown option.
> > >
> > > here?:
> > >
> > >
> > > Computer, Admin Templates, Windows Components, Windows Update.
> > >
> > > In particular, "Allow non-administrators to receive update
> > notifications"
> > >
> > > or here?
> > > Computer Config-> Admin Templates-> Windows Components-> Windows 
> > > Update
> > >
> > > Set "No auto-restart for scheduled Automatic Updates installations"
> > > to
> >
> > > Enabled
> > >
> > > Group policy is such a pain in th butt!
> > > JK
> > >
> > >
> > >
> > >
> > >
> > >  ________________________________
> > >
> > > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Jim Kenzig Kenzig.com
> > > Sent: Tuesday, August 23, 2005 8:50 AM
> > > To: thin@xxxxxxxxxxxxx
> > > Subject: [THIN] Re: M$ Patching...
> > >
> > >
> > >
> > >
> > > Where is this specifically?...I'd like to write an FAQ item on 
> > > this
> > one.
> > > We've had the same problem since we went to Windows 2003 Server. 
> > > So we
> >
> > > can't be alone.
> > > Jim
> > >
> > > Dogers <dogers@xxxxxxxxx> wrote:
> > >
> > > You'll want to have a look at the GP options for the update 
> > > service
> > > - you can force the reboot message not to show for users
> > >
> > > >
> > ********************************************************
> > This Weeks Sponsor: triCerat Inc.
> > You need Day Zero Protection!
> > Get Proactive with triCerat's Simplify Suite.
> > Solve printing, security and profile problems before they occur.
> > http://www.tricerat.com/?thethintl2
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation 
> > mode use the below link:
> > http://thin.net/citrixlist.cfm
> > ********************************************************
> > This Weeks Sponsor: triCerat Inc.
> > You need Day Zero Protection!
> > Get Proactive with triCerat's Simplify Suite.
> > Solve printing, security and profile problems before they occur.
> > http://www.tricerat.com/?thethintl2
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation 
> > mode use the below link:
> > http://thin.net/citrixlist.cfm
> > ********************************************************
> > This Weeks Sponsor: triCerat Inc.
> > You need Day Zero Protection!
> > Get Proactive with triCerat's Simplify Suite.
> > Solve printing, security and profile problems before they occur.
> > http://www.tricerat.com/?thethintl2
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation 
> > mode use the below link:
> > http://thin.net/citrixlist.cfm
> >
> ********************************************************
> This Weeks Sponsor: triCerat Inc.
> You need Day Zero Protection!
> Get Proactive with triCerat's Simplify Suite.
> Solve printing, security and profile problems before they occur.
> http://www.tricerat.com/?thethintl2
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode 
> use the below link:
> http://thin.net/citrixlist.cfm
> 
> ********************************************************
> This Weeks Sponsor: triCerat Inc.
> You need Day Zero Protection!
> Get Proactive with triCerat's Simplify Suite.
> Solve printing, security and profile problems before they occur.
> http://www.tricerat.com/?thethintl2
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode 
> use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: