locked
Windows Server 2016 Updates Management RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    We have begun deploying Windows Server 2016 in SMB networks.

    How can I manage Windows Server 2016 Updates such that, the server download updates; but not install and reboot? Some Updates are creating issues with client's applications running on the server. Typically the updates are deployed once a month (updates which could cause issues are de-selected and remaining updates are deployed off-hours and server is rebooted). Once the problematic updates are approved by the software vendor, they are applied during the next cycle). This worked well with Servers up to 2012. But, 2016 does not seem to have give admin granular control over Update deployement

    Genius is always standing amidst smarter company...

    Monday, May 1, 2017 3:35 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    According to this article,

    "Automatic Updates (AU) is enabled by default on Windows Server 2016 and configured to:

    Download updates for me, but let me choose when to install them

    Windows Server will automatically check Windows Update or a Windows Server Update Services (WSUS) for any relevant updates, and when it finds updates they will be downloaded and you will be notified that there are updates ready to be applied.  Updates will not be installed and servers will not be rebooted automatically, as avoiding production downtime is critical for a server. "

    Patching with Windows Server 2016

    https://blogs.technet.microsoft.com/mu/2016/10/25/patching-with-windows-server-2016/

    Best Regards,

    Amy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Edited by Amy Wang_ Tuesday, May 2, 2017 10:00 AM
    • Marked as answer by iSystemics Wednesday, May 31, 2017 7:33 PM
    Tuesday, May 2, 2017 9:59 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    You could stand up a WSUS server for management of updates and granular approval process. Another option is to set this one to disabled, then windows updates will be a manual process.

     

     

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Monday, May 1, 2017 3:47 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Aside from Group Policy and using the regedit option, are there ways to solve this issue?

    WUS and Group Policy is not always the best option for Small Businesses whose domains have been created on Windows NT 4 and migrated over an ever again to reach 2016. I have a few (inherited - where I am not their first IT service vendor) clients with the same issue - Group Policy takes the PCs 10 -14 minutes to login; even after disabling the User and Computer policies.

    Has Microsoft disabled the management of Updates outside of Group Policy and Registry Edits?

    Regards..

    Monday, May 1, 2017 7:23 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    Aside from Group Policy and using the regedit option, are there ways to solve this issue?

    Its been part of group policy for quite a few versions of windows. You can also do from command line.

    sconfig type 5 for selection and set to manual.

    https://technet.microsoft.com/en-us/library/ee441254%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

     

     


    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows Server] Datacenter Management

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    • Proposed as answer by Amy Wang_ Tuesday, May 16, 2017 8:25 AM
    Tuesday, May 2, 2017 1:21 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    According to this article,

    "Automatic Updates (AU) is enabled by default on Windows Server 2016 and configured to:

    Download updates for me, but let me choose when to install them

    Windows Server will automatically check Windows Update or a Windows Server Update Services (WSUS) for any relevant updates, and when it finds updates they will be downloaded and you will be notified that there are updates ready to be applied.  Updates will not be installed and servers will not be rebooted automatically, as avoiding production downtime is critical for a server. "

    Patching with Windows Server 2016

    https://blogs.technet.microsoft.com/mu/2016/10/25/patching-with-windows-server-2016/

    Best Regards,

    Amy

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Edited by Amy Wang_ Tuesday, May 2, 2017 10:00 AM
    • Marked as answer by iSystemics Wednesday, May 31, 2017 7:33 PM
    Tuesday, May 2, 2017 9:59 AM