{"id":379,"date":"2007-10-26T16:40:58","date_gmt":"2007-10-26T15:40:58","guid":{"rendered":"http:\/\/www.itwriting.com\/blog\/?p=379"},"modified":"2007-10-26T16:40:58","modified_gmt":"2007-10-26T15:40:58","slug":"lessons-from-microsofts-wsus-blunder","status":"publish","type":"post","link":"https:\/\/www.itwriting.com\/blog\/379-lessons-from-microsofts-wsus-blunder.html","title":{"rendered":"Lessons from Microsoft&#8217;s WSUS blunder"},"content":{"rendered":"<p>What happened: Microsoft pushed out an update to Windows Desktop Search (WDS) through WSUS (Windows Software Update Services, used to keep large Windows networks up-to-date), but made an error. <\/p>\n<p>I found I had to read <a href=\"http:\/\/blogs.technet.com\/wsus\/archive\/2007\/10\/25\/wds-update-revision-follow-up.aspx\" target=\"_blank\">this explanation<\/a> three times before I understood it, so here&#8217;s my attempt to re-phrase it.<\/p>\n<p>From time to time, Microsoft issues updates to WDS. One of these updates came out back in February. Sane administrators approved this because it applied only to desktops that <strong>already had WDS installed<\/strong>.<\/p>\n<p>Last Tuesday another such update appeared, and was <strong>automatically approved<\/strong> on sites where <strong>the February update had already been approved<\/strong>. Microsoft&#8217;s error was to make the new update applicable to <strong>all Windows XP SP2 or Windows Server 2003 machines<\/strong>, rather than just those where WDS was already installed.<\/p>\n<p>Why was it such a big blunder? Many Enterprise PCs are set to redirect the My Documents folder to the server, where it can be backed up. WDS always indexes My Documents. Result: heavy network traffic as all these new indexes were being built. Furthermore, Microsoft&#8217;s track record for unobtrusive background indexing is not particularly good. Crippled network = lots of support calls.<\/p>\n<p>The lesson: Susan Bradley says <a href=\"http:\/\/msmvps.com\/blogs\/bradley\/archive\/2007\/10\/26\/lessons-in-patch-pain.aspx\" target=\"_blank\">never auto-approve patches<\/a>. I tend to agree, though it is a dilemma since with security-related patches time is of the essence. But here&#8217;s another case. I noticed on a Small Business Server 2003 box recently that Windows Server 2003 SP2 was waiting to be installed. Before clicking OK, I had a quick look for any issues, and came across <a href=\"http:\/\/support.microsoft.com\/kb\/555912\" target=\"_blank\">this support note<\/a>:<\/p>\n<blockquote>\n<p>After applying Windows 2003 Service pack 2 on Small Business Server 2003 you may see the following issues:<br \/>1.&nbsp; For both Standard and Premium:<br \/>&nbsp;&nbsp;&nbsp;&nbsp; Missing Help and Support service<br \/>&nbsp;&nbsp;&nbsp;&nbsp; R2 patch approve console has error on approval<br \/>2.&nbsp; For Premium with ISA Server 2004<br \/>&nbsp;&nbsp;&nbsp;&nbsp; Networking issues including NAT and VPN connectivity programs, Outlook not connecting, RPC errors, etc.<\/p>\n<\/blockquote>\n<p>Ouch. There are solutions; but that&#8217;s definitely one to defer for after hours maintenance.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>What happened: Microsoft pushed out an update to Windows Desktop Search (WDS) through WSUS (Windows Software Update Services, used to keep large Windows networks up-to-date), but made an error. I found I had to read this explanation three times before I understood it, so here&#8217;s my attempt to re-phrase it. From time to time, Microsoft &hellip; <a href=\"https:\/\/www.itwriting.com\/blog\/379-lessons-from-microsofts-wsus-blunder.html\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Lessons from Microsoft&#8217;s WSUS blunder<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[55],"tags":[],"class_list":["post-379","post","type-post","status-publish","format-standard","hentry","category-microsoft"],"_links":{"self":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/379","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/comments?post=379"}],"version-history":[{"count":0,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/posts\/379\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/media?parent=379"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/categories?post=379"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.itwriting.com\/blog\/wp-json\/wp\/v2\/tags?post=379"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}