question

DolleEdward-3388 avatar image
0 Votes"
DolleEdward-3388 asked RitaHu-MSFT edited

Is It Safe to Patch DCs On DIfferent Days?

We have been patching our DCs on the same day but lately they have been generating CPU alerts. We are thinking of patching them on different days (we patch on Monday and Tuesday mornings) but is it safe to do so? Can the DCs run without issue if one is patched with the latest updates and the other one is not?

windows-server-update-services
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered

Hi there,

Yes, it is completely normal to patch DC on different days and it runs out without any issues.

Hope this answers all your queries, if not please do repost back.
If an Answer is helpful, please click "Accept Answer" and upvote it : )

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
2 Votes"
DSPatrick answered DSPatrick commented

Yes, it isn't a problem, just reboot after the update has been applied (assuming reboot is required)

--please don't forget to upvote and Accept as answer if the reply is helpful--



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



0 Votes 0 ·
DolleEdward-3388 avatar image
0 Votes"
DolleEdward-3388 answered RitaHu-MSFT converted comment to answer

Thanks. I wanted to hear from a few more people before I pass this on to my management. So far I like what I am hearing.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RitaHu-MSFT avatar image
0 Votes"
RitaHu-MSFT answered RitaHu-MSFT edited

I want to share my ideas with you just for your reference:

Can the DCs run without issue if one is patched with the latest updates and the other one is not?
In my opinion, the latest Cumulative Update include the all the hot fixes(all the security updates and non-security updates). Of course, it is recommended to install it as soon as possible. Please try to install the latest Cumulative updates to get all the hot fixes if you missed the previous.

Hope the above will be helpful.

Regards,
Rita


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DolleEdward-3388 avatar image
0 Votes"
DolleEdward-3388 answered

We use a GPO to patch our servers and I have been tasked with patching these servers on different days or different times. Is it possible to create a GPO that only applies to certain DC's in the OU?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DolleEdward-3388 avatar image
0 Votes"
DolleEdward-3388 answered AJTek-Adam-J-Marshall commented

Thanks everyone I figured out the answer to my question above. I can deny applying a GPO for certain servers so I can apply the Monday policy to three servers and the Tuesday policy to the other two servers.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Sounds good, you're welcome. You can get more control over patching by standing up a site WSUS server.

--please don't forget to upvote and Accept as answer if the reply is helpful--



0 Votes 0 ·

And you can follow my 8 part blog series on How to Setup, Manage, and Maintain WSUS.

https://www.ajtek.ca/wsus/how-to-setup-manage-and-maintain-wsus-part-1-choosing-your-server-os/

0 Votes 0 ·