So my servers and applications would be unavailable for @ 2 hours (5:30PM-7:15PM)....that will not fly. -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Jeff Pitsch Sent: Tuesday, August 23, 2005 10:49 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: M$ Patching... So script it. At xPM, disable logins, send messages about servers going down, kick users out, schedule the patch download/install at 5:30. By 7pm your all set. Use SUS (Free as in beer) so you can pick which patches get applied. Jeff On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote: > Yes, we reboot all 70, minus a handful in other time zones, @ 7PM on Sun. > nights. > What we had done the last 4 years, is install the patches, during the > week, and wait for the servers to reboot on Sun. night. Worked fine for years. > > I manually install the patches, so to try to manually install the > patches, on 70 servers, notifying users, kicking users out, disabling > servers, etc, takes a great deal of time. In the midst of all of > that....any server I patch, until the reboot, will get the prompt for each user's session. > > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On > Behalf Of Jeff Pitsch > Sent: Tuesday, August 23, 2005 10:31 AM > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Re: M$ Patching... > > So how do you do it now? You must have a rolling schedule for the > updates, correct? I highly doubt your rebooting all 70 servers at the > same time. It doesn't take that much more time to schedule the > downloads around the reboot times for the servers. What if the > updates require an update to HKCU? how do you take care of that? > > Jeff Pitsch > > On 8/23/05, Schneider, Chad M <CMSchneider@xxxxxxxxx> wrote: > > 24x7 shop, 250+ applications, 70 servers....I would have to schedule > > weeks of time, off hours, to disable servers/applications, install > > patches, reboot servers, install CTX patches for the installed M$ > > patches, reboot again, enable servers....would take weeks to > > complete, if I did nothing else, during my evneings/off hours, and > > M$ patches are released so frequently, that would be my only job..... > > > > We do weekly reboots. > > > > -----Original Message----- > > From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] > > On Behalf Of Jeff Pitsch > > Sent: Tuesday, August 23, 2005 10:18 AM > > To: thin@xxxxxxxxxxxxx > > Subject: [THIN] Re: M$ Patching... > > > > Don't do updates until you can reboot the servers? Don't do updates > > while users are on the servers? > > > > Jeff > > > > On 8/23/05, Tasita Ebacher <tebacher@xxxxxxxxxxxxxxxxxxxxx> wrote: > > > Jim, I don't think ANY of those GP options solve this issue! > > > > > > I've been trying to solve this issue for months now! All my > > > Terminal Services uses get the "Updating your computer is almost > > > complete. You must restart your computer for the updates to take > > > effect. Restart now, Restart Later" pop-up with the buttons > > > grayed out so they can't even close the window! > > > > > > I don't even have "Computer Configuration\Administrative > > > Templates\Windows Components\Windows Update - Do not display > > > Install and Shutdown" in my GP... (isn't this for XP SP2?) > > > > > > I have "Computer Configuration\Admin Templates\Windows > > > Components\Windows Update - Allow non-administrators to receive > > > update notifications" set to Disabled. This only prevents users > > > from receiving the actual prompts to update windows, not the restart prompts. > > > > > > I have "Computer Configuration\Admin Templates\Windows > > > Components\Windows Update - No auto-restart for scheduled > > > Automatic Updates installations" set to Enabled, which will just > > > cause the computer to ask the user to restart rather than just > > > rebooting on it's own. > > > > > > And, after all this, my users STILL get the reboot-prompt pop-up. > > > So, is there actually a way to prevent this? > > > > > > Tasita Ebacher > > > 702 Communications > > > Data Systems Engineer > > > CCNA > > > > > > > > > On 23/08/05, Jim Kenzig Kenzig.com <jkenzig@xxxxxxxxx> wrote: > > > > > > > > Aaaargh is it here?: > > > > > > > > The policies are accessed in the Computer > > > > Configuration\Administrative Templates\Windows > > > > Components\Windows Update node of Group Policy Object Editor.Do > > > > not display Install and > > > Shutdown option. > > > > > > > > here?: > > > > > > > > > > > > Computer, Admin Templates, Windows Components, Windows Update. > > > > > > > > In particular, "Allow non-administrators to receive update > > > notifications" > > > > > > > > or here? > > > > Computer Config-> Admin Templates-> Windows Components-> Windows > > > > Update > > > > > > > > Set "No auto-restart for scheduled Automatic Updates installations" > > > > to > > > > > > > Enabled > > > > > > > > Group policy is such a pain in th butt! > > > > JK > > > > > > > > > > > > > > > > > > > > > > > > ________________________________ > > > > > > > > From: thin-bounce@xxxxxxxxxxxxx > > > > [mailto:thin-bounce@xxxxxxxxxxxxx] > > > > On Behalf Of Jim Kenzig Kenzig.com > > > > Sent: Tuesday, August 23, 2005 8:50 AM > > > > To: thin@xxxxxxxxxxxxx > > > > Subject: [THIN] Re: M$ Patching... > > > > > > > > > > > > > > > > > > > > Where is this specifically?...I'd like to write an FAQ item on > > > > this > > > one. > > > > We've had the same problem since we went to Windows 2003 Server. > > > > So we > > > > > > > can't be alone. > > > > Jim > > > > > > > > Dogers <dogers@xxxxxxxxx> wrote: > > > > > > > > You'll want to have a look at the GP options for the update > > > > service > > > > - you can force the reboot message not to show for users > > > > > > > > > > > > ******************************************************** > > > This Weeks Sponsor: triCerat Inc. > > > You need Day Zero Protection! > > > Get Proactive with triCerat's Simplify Suite. > > > Solve printing, security and profile problems before they occur. > > > http://www.tricerat.com/?thethintl2 > > > ********************************************************** > > > Useful Thin Client Computing Links are available at: > > > http://thin.net/links.cfm > > > ThinWiki community - Excellent SBC Search Capabilities! > > > http://www.thinwiki.com > > > *********************************************************** > > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation > > > mode use the below link: > > > http://thin.net/citrixlist.cfm > > > ******************************************************** > > > This Weeks Sponsor: triCerat Inc. > > > You need Day Zero Protection! > > > Get Proactive with triCerat's Simplify Suite. > > > Solve printing, security and profile problems before they occur. > > > http://www.tricerat.com/?thethintl2 > > > ********************************************************** > > > Useful Thin Client Computing Links are available at: > > > http://thin.net/links.cfm > > > ThinWiki community - Excellent SBC Search Capabilities! > > > http://www.thinwiki.com > > > *********************************************************** > > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation > > > mode use the below link: > > > http://thin.net/citrixlist.cfm > > > ******************************************************** > > > This Weeks Sponsor: triCerat Inc. > > > You need Day Zero Protection! > > > Get Proactive with triCerat's Simplify Suite. > > > Solve printing, security and profile problems before they occur. > > > http://www.tricerat.com/?thethintl2 > > > ********************************************************** > > > Useful Thin Client Computing Links are available at: > > > http://thin.net/links.cfm > > > ThinWiki community - Excellent SBC Search Capabilities! > > > http://www.thinwiki.com > > > *********************************************************** > > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation > > > mode use the below link: > > > http://thin.net/citrixlist.cfm > > > > > ******************************************************** > > This Weeks Sponsor: triCerat Inc. > > You need Day Zero Protection! > > Get Proactive with triCerat's Simplify Suite. > > Solve printing, security and profile problems before they occur. > > http://www.tricerat.com/?thethintl2 > > ********************************************************** > > Useful Thin Client Computing Links are available at: > > http://thin.net/links.cfm > > ThinWiki community - Excellent SBC Search Capabilities! > > http://www.thinwiki.com > > *********************************************************** > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation > > mode use the below link: > > http://thin.net/citrixlist.cfm > > > > ******************************************************** > > This Weeks Sponsor: triCerat Inc. > > You need Day Zero Protection! > > Get Proactive with triCerat's Simplify Suite. > > Solve printing, security and profile problems before they occur. > > http://www.tricerat.com/?thethintl2 > > ********************************************************** > > Useful Thin Client Computing Links are available at: > > http://thin.net/links.cfm > > ThinWiki community - Excellent SBC Search Capabilities! > > http://www.thinwiki.com > > *********************************************************** > > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation > > mode use the below link: > > http://thin.net/citrixlist.cfm > > > ******************************************************** > This Weeks Sponsor: triCerat Inc. > You need Day Zero Protection! > Get Proactive with triCerat's Simplify Suite. > Solve printing, security and profile problems before they occur. > http://www.tricerat.com/?thethintl2 > ********************************************************** > Useful Thin Client Computing Links are available at: > http://thin.net/links.cfm > ThinWiki community - Excellent SBC Search Capabilities! > http://www.thinwiki.com > *********************************************************** > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode > use the below link: > http://thin.net/citrixlist.cfm > > ******************************************************** > This Weeks Sponsor: triCerat Inc. > You need Day Zero Protection! > Get Proactive with triCerat's Simplify Suite. > Solve printing, security and profile problems before they occur. > http://www.tricerat.com/?thethintl2 > ********************************************************** > Useful Thin Client Computing Links are available at: > http://thin.net/links.cfm > ThinWiki community - Excellent SBC Search Capabilities! > http://www.thinwiki.com > *********************************************************** > For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode > use the below link: > http://thin.net/citrixlist.cfm > ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm ******************************************************** This Weeks Sponsor: triCerat Inc. You need Day Zero Protection! Get Proactive with triCerat's Simplify Suite. Solve printing, security and profile problems before they occur. http://www.tricerat.com/?thethintl2 ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm ThinWiki community - Excellent SBC Search Capabilities! http://www.thinwiki.com *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm