{"id":15444,"date":"2013-10-07T13:33:00","date_gmt":"2013-10-07T12:33:00","guid":{"rendered":"https:\/\/aidanfinn.com\/?p=15444"},"modified":"2013-10-07T13:33:00","modified_gmt":"2013-10-07T12:33:00","slug":"beware-of-windows-server-and-system-center-update-rollups","status":"publish","type":"post","link":"https:\/\/aidanfinn.com\/?p=15444","title":{"rendered":"Beware of Windows Server and System Center Update Rollups"},"content":{"rendered":"<p>Tomorrow is the first Patch Tuesday of the quarter, and going on history, this is when we tend to see Update Rollups for Windows Server and\/or System Center be released via Windows Update.\u00a0 While this type of release confuses people (normally QFEs\/hotfixes must be manually downloaded and security fixes\/service packs come via Windows Update \u2013 yes I know update rollup is a Windows Update category) this is not what I want to discuss.<\/p>\n<p>I don\u2019t know for certain that there will be any update rollups this month. But if I was a betting man, if there will be any, then I\u2019d put money down on there being issues with any hypothetical update rollup.\u00a0 History has taught us that update rollups are dangerous.\u00a0 Cause in point, July:<\/p>\n<ul>\n<li>Window Server 2012: One of the most common clustered Hyper-V host networking configurations was broken by a contained fix: Live Migration caused a bugcheck.\u00a0 You can imagine how painful that was to fix.<\/li>\n<li>System Center Data Protection Manager 2012 SP1: Agents could not be updated.<\/li>\n<li>System Center Data Protection Operations Manager 2012 SP1: An incompatibility with <a href=\"http:\/\/support.microsoft.com\/kb\/2775511\">KB2775511<\/a> (Windows 7 and W2008 R2) caused agents to fail their heartbeat and grey out.<\/li>\n<li>Exchange: Ask any Exchange MVP what the history of URs has been like for that product.<\/li>\n<\/ul>\n<p>My advice: let the uninformed out there test any update rollup for you.\u00a0 Do not automatically approve update rollups.\u00a0 Do not push them out.\u00a0 Go reconfigure your auto-approval rules now.\u00a0 Watch the TechNet forums, Twitter feeds, and the usual blogs.\u00a0 And then after a month, you can deploy the release if it\u2019s clean \u2026 or wait for V2 or V3 of the update with the required fix.<\/p>\n<p>If you\u2019re using System Center Configuration Manager, then configure your auto-approval rules to delay deployment for 30-45 days.\u00a0 That gives you automation and caution.<\/p>\n<p>EDIT:<\/p>\n<p>An <a href=\"support.microsoft.com\/kb\/2883201\" target=\"_blank\">update rollup<\/a> actually was released for Windows 8, Windows Server 2012, and Windows RT.\u00a0 Another one was <a href=\"support.microsoft.com\/kb\/2862551\/\" target=\"_blank\">released <\/a>for Windows Server 2012 Essentials.\u00a0 My advice stands: let some other mug test it for you, wait, and watch.\u00a0 Give it a month, and then deploy if all is well.<\/p>\n<div class=\"wlWriterEditableSmartContent\" id=\"scid:0767317B-992E-4b12-91E0-4F059A8CECA8:6c10b553-3664-4afc-a55f-042eaa99daba\" style=\"float: none; margin: 0px; display: inline; padding: 0px;\">Technorati Tags: <a href=\"http:\/\/technorati.com\/tags\/Microsoft\" rel=\"tag\">Microsoft<\/a>,<a href=\"http:\/\/technorati.com\/tags\/Windows+Server+2012\" rel=\"tag\">Windows Server 2012<\/a>,<a href=\"http:\/\/technorati.com\/tags\/System+Center\" rel=\"tag\">System Center<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Tomorrow is the first Patch Tuesday of the quarter, and going on history, this is when we tend to see Update Rollups for Windows Server and\/or System Center be released via Windows Update.\u00a0 While this type of release confuses people (normally QFEs\/hotfixes must be manually downloaded and security fixes\/service packs come via Windows Update \u2013 &hellip; <a href=\"https:\/\/aidanfinn.com\/?p=15444\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Beware of Windows Server and System Center Update Rollups&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[25],"tags":[185,193,118],"class_list":["post-15444","post","type-post","status-publish","format-standard","hentry","category-microsoft","tag-microsoft","tag-system-center","tag-windows-server-2012"],"aioseo_notices":[],"jetpack_featured_media_url":"","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/15444","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=15444"}],"version-history":[{"count":0,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=\/wp\/v2\/posts\/15444\/revisions"}],"wp:attachment":[{"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=15444"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=15444"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aidanfinn.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=15444"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}