locked
Security Monthly Quality Update RRS feed

  • Question

  • We have a lot of windows server 2012 servers to form a LAN,and often new servers are added,
    We hope that the patch installation of all servers will be up to date in a specific month,Is it possible to  apply this period of time Security Monthly Quality Update (aka the Monthly Rollup), after the operating system is installed?


    We have a WSUS server to update the patch on the LAN.
    However, the number of patches installed on each machine is inconsistent,
    and cannot install all patches in one update,
    it is difficult to maintain the consistency of all server patches.
    Is it possible to apply a secure monthly quality update (also known as a monthly rollup) on each server to achieve consistency across all server patches.


    jennifar.ding

    Wednesday, November 13, 2019 2:20 AM

Answers

  • Hi Jennifar,
       

    I would love to try to list a list of updates that you need for a new Windows Server 2012 R2 server, but this doesn't seem to be accurate. For different sales versions, different platforms, and different language systems, the required updates may be different when initial updates are made.
      

    So my suggestion, if you have a system image of the same version and platform in your environment, you can test a newly deployed server and patch it in a WSUS that has added all 2012 R2 types of updates and has decline superseded updates. Until this newly deployed server no longer needs any updates, statistics on these approved updates will get what you need.
      

    Hope the above can help you.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by jennifar.ding Thursday, November 14, 2019 9:09 AM
    Thursday, November 14, 2019 8:44 AM

All replies

  • Hi Jennifar,
        

    We hope that the patch installation of all servers will be up to date in a specific month,Is it possible to  apply this period of time Security Monthly Quality Update (aka the Monthly Rollup), after the operating system is installed?

    About Monthly Rollup, each new Monthly Rollup will supersede the previous, so installing the latest Monthly Rollup will ensure you have all fixes since the start of the model in October 2016.
    So installing the latest Monthly Rollup will include the latest and past system security and reliability fixes.  However, for the newly installed operating system client, in addition to the Monthly Rollup, other updates may need to be installed. For example, Servicing stack update is a precondition for some Monthly Rollup.
        

    We have a WSUS server to update the patch on the LAN.
    However, the number of patches installed on each machine is inconsistent,
    and cannot install all patches in one update,
    it is difficult to maintain the consistency of all server patches.
    Is it possible to apply a secure monthly quality update (also known as a monthly rollup) on each server to achieve consistency across all server patches.

    Mention that there is a WSUS server in your environment, then my suggestion:
       

    1. In WSUS, you can see which updates were supersedence by subsequent updates.
      Please first consider the update that has been supersedence, do the decline processing.
         

               
    2. Wait for these newly deployed clients to complete the status report to WSUS, then approve those updates that are needed and not replaced. This will include the newer Monthly Rollup, as well as some other updates.
          

    Hope the above can help you.
         

    Regards,
    Yic


    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, November 13, 2019 6:47 AM
  • Hi Yic
    Thank you for your reply.

    Can you tell me in detail that the newly installed system (Windows Server 2012 R2) wants to maintain the patch status in October 2018, Besides the Monthly Rollup, What patches must be installed? Is there a problem if it is not installed?

    Thanks a lot.



    jennifar.ding

    Wednesday, November 13, 2019 8:12 AM
  • Hi Jennifar,
       

    I would love to try to list a list of updates that you need for a new Windows Server 2012 R2 server, but this doesn't seem to be accurate. For different sales versions, different platforms, and different language systems, the required updates may be different when initial updates are made.
      

    So my suggestion, if you have a system image of the same version and platform in your environment, you can test a newly deployed server and patch it in a WSUS that has added all 2012 R2 types of updates and has decline superseded updates. Until this newly deployed server no longer needs any updates, statistics on these approved updates will get what you need.
      

    Hope the above can help you.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by jennifar.ding Thursday, November 14, 2019 9:09 AM
    Thursday, November 14, 2019 8:44 AM