Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [windows-patching]

18 questions
5
votes
3 answers

Replicating patch level from one server to another without WSUS/patch management

The scenario is: Server1 and Server2, both running Windows Server 2012 R2 at the same patch level, are currently in a load-balancing cluster. Server1 has application issues and advice is to replace it. It's been taken out of the cluster and…
Maximus Minimus
  • 8,987
  • 2
  • 23
  • 36
4
votes
0 answers

Server 2016 Not Rebooting at Scheduled TIme

My Organization has a maintenance window between 4-8am every Sunday Morning. We have an OU structure setup to spread our production servers out for reboot during this scheduled time (example Reboot4-5, Reboot5-6, Reboot6-7, etc). We have GPOs on…
joshcorr
  • 41
  • 4
4
votes
1 answer

How to ensure server 2016 is getting all the latest patches

I ran a Nessus scan on my Server 2016 server and got the following error: "The remote Windows host is missing security update 4571694." When doing some research on the patch I found this…
Brad Cohen
  • 181
  • 1
  • 8
3
votes
1 answer

Windows Server 2003 - applied WCRY patch - restarted then RDP Failed (the workstation driver is not installed)

Installed the WCRY patch found here http://www.catalog.update.microsoft.com/Search.aspx?q=KB4012598 After restarting, the server started having issues with the network interface. RDP does not work, error: The workstation driver is not…
Vince T
  • 81
  • 6
2
votes
2 answers

How to Identify Unnecessary Windows Applications

We're currently going through a process of using Qualys scans to find security vulnerabilities on Windows servers in our enterprise. We are finding quite a number of older Windows applications on our servers that we think are being installed by…
Tikhon
  • 87
  • 1
  • 9
2
votes
1 answer

Confused on BigFix relevance - x64 files

I am using BigFix in an Enterprise Environment and noticed a recent round of Microsoft patches for 2016 have failed on a small group of assets. I was able to work around this by creating Custom Copy Fixlets, using modified relevancy, however the…
Sawta
  • 345
  • 1
  • 4
  • 13
2
votes
1 answer

Find Windows Update Given GUID from windowsupdate.log?

When I look through the C:\windows\windowsupdate.log I see events like this : Added update {19a3a735-8458-4b6c-baa8-eef88e4058cf}.201 to search result How can I map a guid given in this way to an update? What is the significance of the .201? (or…
MattUebel
  • 927
  • 4
  • 13
  • 32
2
votes
3 answers

Windows Server 2008 R2 ADUC - Naming information cannot be located

I'm having a very hard time with Active Directory. Brand new server with a fresh install of Windows Server 2008 R2 SP1. Everything was fine until it restarted after installing updates. When I try to access ADUC, I receive a message "Naming…
Darren Carter
  • 21
  • 1
  • 2
1
vote
1 answer

How to update Windows 10 Pro Endpoints remotely?

Here is the scenario, We have Windows 10 Pro (100 end points) all physical. It is a MS Windows AD environment. What is the best solution to update these end points remotely? Looking for something that does this job, not a host of other features.…
truthtriumphs
  • 59
  • 1
  • 10
1
vote
1 answer

How to protect against/fix new vulnerability CVE-2021-36934?

The essence of this vulnerability is that if you perform a shadow copy of your important files with hashed passwords for all OS accounts, encryption key data, and other important information (the files stored in SAM, SECURITY and SYSTEM) - you will…
Maurice.Torres64
  • 11
  • 1
1
vote
0 answers

How can I determine if Microsoft Patches are recommended or optional without using IUpdateSearcher?

On a single computer, it's simple enough to filter which updates Microsoft deems important by running a PS script such as the following: $session = New-Object -ComObject Microsoft.Update.Session $searcher = $session.CreateUpdateSearcher() $result =…
saltface
  • 415
  • 5
  • 17
0
votes
0 answers

Configure Windows Service user account based on Domain Controller check

We have a patching service which is a windows service that patches the non domain controller and domain controllers. Currently we were using same service account(account_abc) which has a Domain Administrator privilege to patch all the servers We…
WonderHeart
  • 101
  • 1
0
votes
0 answers

How to find pre-requisites for any KB article

I want to know in Config Manager database, if there is a way to know what are the prerequisites needed to install a KB article? Something like If I want to install a KB article - KB12345, there must be data in some table which tells me that before…
WonderHeart
  • 101
  • 1
0
votes
1 answer

Server in a unstable state after patching?

I'm about to patch some production server and i was wondering if they will be in a unstable state until de reboot (at night). I know there's 2 kind of patch, the ones who need a reboot and the others. Our servers run 2008 R2 x64. edit : We patch…
e1che
  • 119
  • 8
0
votes
0 answers

Does Kerberos OOB Patch Change RC4-HMAC Settings on DC

I have a very specific question before we deploy the November 2022 OOB patch to resolve the Kerberos deal on our DCs. 1st - I ran a klist command on a Windows box and it returns about 16 server entries. Among them I notice the KerbTicket Type is…
DesignerMind
  • 101
  • 1
1
2