1

I have disabled windows update on all of my windows server. Will that cause problems?

3

It's good practice to disable automatic updates on servers: you don't want them to apply updates and reboot whenever they feel like doing it, and also it's better to not immediately install any update on all your servers as soon as it comes out, without doing at least some testing before.

However, you definitely should keep your servers up to date; exactly how, when and what updates will be applied is up to you (or your company/department) to define, but you really should have an update policy (even as simple as "wait for a week after updates are released, then run a manual Windows Update on each machine during off-peak hours") and follow it.

  • How i testing that updates from microsoft is safe for installation in production server? There is any best practice for that? – silverknightone May 12 '16 at 7:12
  • Use test servers. If you don't have any of them, that's a whole different problem (which I strongly suggest you address ASAP). – Massimo May 12 '16 at 13:43
  • This answer is simply not good practice from any enterprise perspective, irregardless of os platform. Some form of automated patch maintenance is simply required. – Jim B May 13 '16 at 12:28
  • 1
    @JimB But I still stand by my point: without proper planning, automated updating can be even worse than not updating at all. – Massimo May 13 '16 at 19:15
  • 1
    @JimB Tell that to all of the exchange and system center admins when WMF 3 and 4 came out :). Also, many patch management tools don't rely on the automatic update mechanism in Windows. I absolutely agree that patch automation and compliance reporting is critical all but the smallest of environments, but that doesn't always require WAU to be enabled. – MDMarra May 14 '16 at 16:17
13

No, it is not safe.

Having Windows Update disabled means you are not receiving latest security and other updates from Microsoft. Unless you keep downloading and installing the patches on monthly basis manually, this leaves your servers (as well as your whole environment) vulnerable to security attacks. In a long run, this might result in stability issues or data loss/leak.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.