|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
Re: Installing patch KB837001 via Windows Update |  |
- To: "Patch Management Mailing List" <[EMAIL PROTECTED]>
- Subject: Re: Installing patch KB837001 via Windows Update
- From: "Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP]" <[EMAIL PROTECTED]>
- Date: Thu, 15 Apr 2004 19:59:49 -0700
- In-reply-to: <[EMAIL PROTECTED]>
- References: <[EMAIL PROTECTED]>
- Reply-to: "Patch Management Mailing List" <[EMAIL PROTECTED]>
Okay it's the end of the day and I gotta rant. We keep talking about
how Microsoft should regression test these patches and yet look what we
are asking them to do.
In IE they have to release it in 400 different interations.
http://radio.weblogs.com/0001011/2004/01/14.html#a6186
I have wacked off smb signing on my box. I have Line of business
software that they've never heard of, you name it. If you do a tripwire
on a server, you see that it's in constant motion with log files and all
the things it does on a daily basis. It's sort of like an airplane when
you think about it..... as you go thundering down the runway somehow it
just works. It's actually kind of amazing in that.
http://techupdate.zdnet.com/techupdate/stories/main/0,14179,2914659,00.html
Yes, I want them to build better patches, but I'd rather they'd build
patches in a way that I can get back to where I was before the patch
went on as well. The reality is they cannot patch for all the "junk"
that I have on my box. And that's the reality of Patch Managment. I
have to take the risk. I have to make the decision. In my office I'm
taking the chance that my ports are pretty nice and tight and nothing
[while exploit code is out] is in worm mode and I'm coming in to the
office tomorrow when everyone else is making a nice three day weekend
out of it and patching my LAN and cleaning my office. [Do I know how to
party or what?]
The point is no vendor can patch test for the environments we have.
Ever. So we need to take our own responsibility for our networks.
Susan
Hien Nguyen wrote:
I ran another update today and it seemed that all the patches installed OK.
Checked Add/Remove Programs, checked the registry, and the patches are all
there. It's strange that when WU install the patch KB837001 (MS04-014), it
took a rather long time to complete (nearly 10 minutes for me).
So far, I have not notice any side-effects. So it's a case of monitoring the
servers and see if any errors will come up.
One would think that when patches are released, that they have been
thoroughly regression tested. But when patches are deemed critical, you have
little choice but patch, and patch quickly.
Thanks to everyone who has responded.
Hien Nguyen
Network Administrator
Information Technology
City of Whittlesea
Australia
Any personal or sensitive information contained in this e-mail and attachments must be handled in accordance with the Victorian Information Privacy Act 2000, the Health Records Act 2001 or the Privacy Act 1988 (Commonwealth), as applicable.
This e-mail, including all attachments, is confidential. If you are not the intended recipient, you must not disclose, distribute, copy or use the information contained in this e-mail or attachments. Any confidentiality or privilege is not waived or lost because this e-mail has been sent to you in error.
If you have received it in error, please let us know by reply e-mail, delete it from your system and destroy any copies.
---
To unsubscribe send a blank email to [EMAIL PROTECTED]
--
http://www.sbslinks.com/really.htm
---
To unsubscribe send a blank email to [EMAIL PROTECTED]
| |