Skip Ribbon Commands
Skip to main content

Quick Launch

Todd Klindt's home page > Todd Klindt's SharePoint Admin Blog > Posts > Don’t Enable Automatic Updates on SharePoint Servers
October 09
Don’t Enable Automatic Updates on SharePoint Servers

I had an incident a couple of weeks ago that I thought I’d share with all of you. I had a beautiful four server SharePoint 2013 farm. It was humming along, serving up SharePoint pages with the best of them. Then Patch Tuesday hit last month. One of the four servers was set to automatically install Windows Updates, and it did. It installed the crap out of them. Normally that’s not a good thing, but it’s also not a horrible thing. In the past that’s bitten us SharePoint admins because things like .NET patches, or random reboots in the middle of the night. Inconvenient, for sure, but not the end of the world. The September 2014 Patch Tuesday rotation had another trick up its sleeve. It looked like this:

2014-09-29_11-35-55

Picture courtesy of John White (blog | Twitter)

Those sneaky devils snuck a SharePoint patch in the Windows Updates. Installing a patch on just one server of course causes all kinds of havoc. Since I thought all the servers were set to only download it was doubly confusing as to why SharePoint was now all in a snit about needing an upgrade. I got it all taken care of, but that’s food for another blog post.

My recommendation is to NOT enable installing Windows Updates automatically. I recommend having Windows download the patches, then installing them manually. You can change that setting in Control Panel > System and Security > Turn automatic updating on or off. You can also Win + R and run wuapp. It looks like this:

image

You can also set it using PowerShell with this little beauty:

Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' -Name AUOptions -Value "3"

That might be showing off a little, but using PowerShell is just cool. You can look in this White Paper to see all the different Windows Updates settings and their values.

However, that does not mean you shouldn’t patch your servers. The OS still needs to be patched. You can install them manually, but that sounds like a lot of work. An even better idea would be to install a WSUS Server and push your patches out that way.

Happy patching,
tk

ShortURL: http://www.toddklindt.com/DontAutoUpdate

Comments

Afraid to comment

Karma will bite me if I say I've been lucky.....oh wait...hold that thought.
 on 10/12/2014 9:00 AM

Great Thoughts

Yes, patching 2013 - especially with Distributed Cache - can cause all kidns of problems.  August was the only month that SharePoint was "supposed" to be included in Automatic Updates, but it was in September as well.  So, rule of thumb - manually patch.
 on 10/12/2014 9:32 PM

Re: Don’t Enable Automatic Updates on SharePoint Servers

Well if SOMEONE reviewed their Health Analyzer, they would see the "Automatic Update setting inconsistent across farm servers" rule light up :)

--Piotr Siódmak
 on 10/13/2014 2:59 AM

Re: Don’t Enable Automatic Updates on SharePoint Servers

SharePoint likes to be patched as much as my dog likes to get a bath. In either scenario, it never ends well for me.
 on 10/13/2014 3:27 PM

Re: Afraid to comment

Yup, you've gone and ruined it. :)
Todd O. KlindtNo presence information on 10/14/2014 10:37 AM

Re: Great Thoughts

It's so scary. It makes me want to see if McDonald's is hiring.
Todd O. KlindtNo presence information on 10/14/2014 10:37 AM

Re: Don’t Enable Automatic Updates on SharePoint Servers

Piotr,
I hadn't thought of that.

tk
Todd O. KlindtNo presence information on 10/14/2014 10:37 AM

Re: Don’t Enable Automatic Updates on SharePoint Servers

Haha. I agree, Bonnie. :)

tk
Todd O. KlindtNo presence information on 10/14/2014 10:38 AM

OWA Broken After SP August Patch Applied

After installing and applying the SP patches for August (successfully) I am finding the my Office Web Apps integration is now broken.

Any thoughts?
 on 11/6/2014 3:45 PM

Re: OWA Broken After SP August Patch Applied

I haven't seen that exact problem. Did you try to reconnect the SharePoint farm to the OWA farm? That will fix a lot of issues.

tk
Todd O. KlindtNo presence information on 11/11/2014 8:52 AM
1 - 10Next

Add Comment

Items on this list require content approval. Your submission will not appear in public views until approved by someone with proper rights. More information on content approval.

Title


Body *


Today's date *

Select a date from the calendar.
Please enter today's date so I know you are a real person

Twitter


Want a message when I reply to your comment? Put your Twitter handle here.

Attachments

 

 Please Support my Sponsors