- Get a grip or you don't get the job
- Desktops of the future here today
- Researcher hides IE attack on Web
- Cisco third quarter 2008 channel stuffing
- Sci-Fi's goofiest gadgets and technology
Rss FeedRss Feed
Don't get 'Green Scammed'. Listen now!
Cisco opens ISR routers to developers; SaaS providers cut costs with open source. Listen now!
Before now, midsize customers settled for either an expensive and complex array or low cost solution that lacked functionality. Now experience virtual storage with enterprise class functionality at an affordable price.
Get the latest on storage technologies that allow IT professionals to better cope with new IT demands. Learn how storage technologies can help you successfully tackle e-Discover, regulatory compliance, green data center initiatives and the data explosion. Get all the details now.
HP's Network Lifestyle Management can help you automate network processes and improve NOC efficiency. This webinar is part three of a four part series on Business Services Management (BSM) evolution to help you better align IT with business objectives. Register for this event scheduled for Wednesday, January 30, 2008 at 11:00 a.m. PDT/2:00 p.m. EDT to learn more. Register for this live webcast now.
So the line of defence remains is "PIN NUMBER" Wowww what a strong security ? HSBC , invest some money...- Anonymous
The powerful tape technology can address data security with tape encryption as well as long term data protection.
Discover what disk and tape really cost -- and which solution provides lower total cost of ownership and optimizes energy use for your organization
The Clipper Group explores the truth behind the myths of tape, digging into the misconceptions in the disk vs. tape debate.
Over two thirds of disk-only users look to add tape back into storage infrastructure according to recent survey.
I am new to the company where I work and responsible for the patch management process, before I started here there was none.
Now I have implemented a patch management process, but we have a server farm of 500 Windows servers not connected to the internet
consisting of Windows 2000 and 2003 servers with various service packs. For these servers I still have to see how to get up
to date with the patches (some servers are missing patches as from up 2002). Now I have to make sure our servers are up to
date with at least critical patches which all require reboots for patches of the last 5 years. Of course our clients like
to limit the down time of the servers. Do you have any suggestions?
-- Via the Internet.
Unfortunately, patching servers to keep them current and avoid problems is a cost of doing business. You should have some type of Internet connectivity to do the patching, because that will be faster than installing patches from CDs. While some patches let you hold off on reboots until the end, I would not recommend it; I prefer to apply the patches in stages, testing the server for proper operation between groups of patches.
To minimize the potential problems, there are several things you should do first to get ready. Make sure that all the servers are showing the same time and are using the same time source. I would also look into the server resource tools to run some additional server checks to look for possible Active Directory problems, etc. before and during the patch application process.
Because of the number of servers, I'd strongly suggest looking at a commercial patch-management solution such as PatchLink - they can make the process easier and reduce the amount of overall downtime. In any case, schedule some additional tape backups to give yourself a safety net just in case. You may also want to factor in updates for additional services such as SQL, which will need updates applied that aren't a part of the base Windows server patch process.
Your clients need to understand that there will be some downtime. With some planning and the use of a commercial patch-management tool, you should be able to go a long ways in minimizing the amount of downtime. Once the servers are up to date, keeping them up to date on an ongoing basis shouldn't be nearly as involved.
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com The Industry Standard IDG List Services |
 |
Copyright © 1994-2008 Network World, Inc. All rights reserved. |
I think WSUS would be a good choiceBy Calvin on January 4, 2008, 3:10 pmWSUS in conjunction with GPO's can be flexible enough to meet the requirements that were described. I have several hundred servers and I am using WSUS with GPO's...
Reply | Read entire comment
Ron if you don’t mindBy Richard Linke on September 24, 2007, 10:13 amRon if you don’t mind I’d like to give my point of view on the reason WSUS may not be the best choice. I spent a lot of time reviewing patch management tools...
Reply | Read entire comment
Why not use WSUS?By Jon on April 9, 2007, 10:45 amOn the face of it, this is a perfect opportunity for WSUS. Since you didn't suggest it, I can only think that you have a good reason for not doing so. May I ask...
Reply | Read entire comment
Patching an entire server farmBy Ron Nutter on April 8, 2007, 9:43 pmUnfortunately, patching servers to keep them current and avoid problems is a cost of doing business. You should have some type of Internet connectivity to do the...
Reply | Read entire comment
How to patch old Windows 2000 servers while minimizing downtime?By Anonymous on April 5, 2007, 10:27 ami loved the article on patch management. Re: How to handle patch management. I am new to the company where i work and responsible for the patch management...
Reply | Read entire comment
View all comments