can i apply update in any order? i've a big historic of patch to a can i apply update in any order? 7/6/2007 11:24:01 AM Hi, I'm doing a study to make WSUS v3.0 available and operationnal on my network's company. We have since there not apply any patch on our server and workstation, i've so a consistent historic of patchs to apply! Is there an order to follow for applying updates or can i choose arbitrarily some patch applied every month to make up for lost time? Thank by advance. Best regards. Yannick

Re: can i apply update in any order? i've a big historic of patch to a "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 7/6/2007 1:21:23 PM "can i apply update in any order?" <can i apply update in any order?[ at ]discussions.microsoft.com> wrote in message news:07CF7D0B-5C6A-4644-8BC6-337C29969B6D[ at ]microsoft.com... [Quoted Text] > Hi, > > I'm doing a study to make WSUS v3.0 available and operationnal on my > network's company. > > We have since there not apply any patch on our server and workstation, > i've > so a consistent historic of patchs to apply! > > Is there an order to follow for applying updates or can i choose > arbitrarily > some patch applied every month to make up for lost time? You can generally apply them in any order; however, there are some minimum requirements. For one, Windows XP must have Service Pack 1, and Windows 2000 must have Service Pack 3, or WSUS cannot even be used. So first you must make sure those service packs have been applied before you install WSUS. Next, for those systems that are used to access the internet: [a] Apply all SECURITY Updates. [b] Apply the latest Cumulative Update for Internet Explorer. Then, for systems not used to access the internet, and for the rest of the internet systems [c] Apply all CRITICAL Updates. Finally, apply the rest of the non-security, non-critical updates. That's what I would recommend if you wanted to phase in updates by groups of updates. However, the volume of non-security updates is fairly trivial in comparison to security updates, so you may find it's perfectly fine to just install *everything* in one shot over a weekend. I would suggest setting up a couple of TEST machines to observe what actually needs to be installed and what happens when you approve the updates for installation. Then, armed with that information, you can make an educated decision about the rest of your systems. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://www.microsoft.com/wsus And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....

Re: can i apply update in any order? i've a big historic of patch can i apply update in any order? 7/6/2007 7:38:07 PM thanks for your answer, when i ask the order to follow i mean : is there a relationship between KB, if i apply a KB (newer) before another KB (older) is there a consequence, or must I apply KBs ordered by date? Is the latest cumulative Update contain all necessary KBs for secure the WSUS client? In every case? the wkstations are Win XP SP2 , win 2K SP4. servers are Win 2K SP3/4, Win 2K3 SP1/R2. thanks a lot. "Lawrence Garvin (MVP)" wrote: [Quoted Text] > "can i apply update in any order?" <can i apply update in any > order?[ at ]discussions.microsoft.com> wrote in message > news:07CF7D0B-5C6A-4644-8BC6-337C29969B6D[ at ]microsoft.com... > > Hi, > > > > I'm doing a study to make WSUS v3.0 available and operationnal on my > > network's company. > > > > We have since there not apply any patch on our server and workstation, > > i've > > so a consistent historic of patchs to apply! > > > > Is there an order to follow for applying updates or can i choose > > arbitrarily > > some patch applied every month to make up for lost time? > > You can generally apply them in any order; however, there are some minimum > requirements. > > For one, Windows XP must have Service Pack 1, and Windows 2000 must have > Service Pack 3, or WSUS cannot even be used. So first you must make sure > those service packs have been applied before you install WSUS. > > Next, for those systems that are used to access the internet: > [a] Apply all SECURITY Updates. > [b] Apply the latest Cumulative Update for Internet Explorer. > > Then, for systems not used to access the internet, and for the rest of the > internet systems > [c] Apply all CRITICAL Updates. > > Finally, apply the rest of the non-security, non-critical updates. > > > That's what I would recommend if you wanted to phase in updates by groups of > updates. However, the volume of non-security updates is fairly trivial in > comparison to security updates, so you may find it's perfectly fine to just > install *everything* in one shot over a weekend. > > I would suggest setting up a couple of TEST machines to observe what > actually needs to be installed and what happens when you approve the updates > for installation. Then, armed with that information, you can make an > educated decision about the rest of your systems. > > > -- > Lawrence Garvin, M.S., MCTS, MCP > Independent WSUS Evangelist > MVP-Software Distribution (2005-2007) > https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E > > Everything you need for WSUS is at > http://www.microsoft.com/wsus > > And, almost everything else is at > http://wsusinfo.onsitechsolutions.com > ..... > > > >

Re: can i apply update in any order? i've a big historic of patch Harry Johnston <harry[ at ]scms.waikato.ac.nz> 7/6/2007 9:00:24 PM can i apply update in any order? wrote: [Quoted Text] > thanks for your answer, when i ask the order to follow i mean : is there a > relationship between KB, if i apply a KB (newer) before another KB (older) is > there a consequence, or must I apply KBs ordered by date? You can apply updates in any order. If two updates both change the same file, the latest version of the file will always be installed regardless of which way around you install the updates. The only exception is that in some cases one update doesn't apply to the system until another is installed - for example you can't apply a patch to the .NET framework until you've installed the .NET framework. However, if you are using WSUS this will be taken care of automatically; if you are installing by hand the update will tell you if it cannot be installed at present. > Is the latest cumulative Update contain all necessary KBs for secure the > WSUS client? In every case? Not if I'm understanding what you mean correctly. Each cumulative update replaces the corresponding updates preceding it, e.g., the June Internet Explorer cumulative update replaces all previous Internet Explorer cumulative updates - but it doesn't replace any other updates. Harry.

Re: can i apply update in any order? i've a big historic of patch "Lawrence Garvin \(MVP\)" <onsitech[ at ]community.nospam> 7/7/2007 10:14:52 AM "can i apply update in any order?" <caniapplyupdateinanyorder[ at ]discussions.microsoft.com> wrote in message news:8BD49CE8-8927-4359-9519-BE517C00D463[ at ]microsoft.com... [Quoted Text] > thanks for your answer, when i ask the order to follow i mean : is there a > relationship between KB, if i apply a KB (newer) before another KB (older) > is > there a consequence, or must I apply KBs ordered by date? You don't have that level of control, unless you approve updates one at a time. The WUA determines the order of installation in a batch of updates. Just approve all of the security updates and/or all of the critical updates, and let the client agent sort out which order to actually install them. In general, though, you should install updates in chronological order (based on release date) if you're doing it manually. > Is the latest cumulative Update contain all necessary KBs for secure the > WSUS client? In every case? The "Cumulative Update" is only for Internet Explorer. It does not contain any other security or critical updates for the operating system. The update metadata in the WSUS console will specifically list which updates have been superceded. -- Lawrence Garvin, M.S., MCTS, MCP Independent WSUS Evangelist MVP-Software Distribution (2005-2007) https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E Everything you need for WSUS is at http://www.microsoft.com/wsus And, almost everything else is at http://wsusinfo.onsitechsolutions.com .....