I inherited a network with several servers running Windows Server 2003. They have not been updated for several years because my predecessor was concerned that updating Windows Server 2003 might render it useless in case there's a problem. Here are my questions:

  1. What is the best way to update the servers to that they are properly patched? I'm thinking in terms of strategy.
  2. Is there a free or low-cost software that I can install so that if the windows update didn't work, I can go back (or revert) to all the settings prior to the update?
  3. Should I do a System State backup each time prior to an update?
  • 3
    Of course, backups are always advisable. The best way is to simply run Windows Update and if it b0rks (highly unlikely), uninstall the offending update(s). If the system is totally bricked (incredibly unlikely) then restore from said backup. Ideally, you'll do this on an identical test/staging system, but yes... this is rarely practical. Jun 27, 2011 at 20:35

1 Answer 1

  1. Install all service packs, and then deploy Windows Server Update Services. Then you can roll out all the updates to the servers at one time (WSUS can deploy service packs for you, but you might find it "feels" safer to do them by hand on each machine. It's not really any safer, but it might appease your conscience if anything goes wrong)

  2. Yes, Windows Server Update Services permits for un-installing certain updates. Otherwise, System Restore does a good job as well.

  3. If you like, but Windows will do a System Restore snapshot if you have it enabled, so that would only be for a totally worst-case scenario. I would try an un-install via WSUS and then a system restore before reverting to a system state backup.

(p.s. you should be doing regular system backups anyway, so I suggest that if you're not doing them, setting up a regular backup schedule should be your first step regardless of anything you do next. ntbackup can be clunky, but it actually does a pretty good job)

  • As a Server 2003 Admin, what Mark said!
    – ITHedgeHog
    Jun 27, 2011 at 21:10
  • Thanks for the advice! Is a third party software like Acronis a better option that using system restore? Thanks, again!
    – Charles
    Jun 28, 2011 at 18:45
  • @Charles - not really, system restore is a very under-rated tool. You don't lose any data, it just rolls back your Windows registry and things like that, and it takes about 30 minutes, rather than a restore which takes hours and is destructive to your data. Jun 28, 2011 at 21:30

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .