dditty comments on Sysadmin shock as Windows Server 2025 installs itself

Technology

88,034 readers

15,636 active

3,275 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 3 years ago

moderators

[–] dditty@lemm.ee 27 points 2 years ago (5 children)

Yet another reason to not do auto-updates in an enterprise environment for mission-critical services.

permalink

fedilink

source

parent

hideshow 5 child comments

[–] superkret@feddit.org [S] 41 points 2 years ago (4 children)

In an enterprise environment, you rely on a service that tracks CVEs, analyzes which ones apply to your environment, and prioritizes security critical updates.
The issue here is that one of these services installed a release upgrade because Microsoft mislabelled it as security update.

permalink

fedilink

source

parent

hideshow 4 child comments

[–] NocturnalEngineer@lemmy.world 12 points 2 years ago (3 children)

Should still be doing phased rollouts of any patches, and where possible, implementing them on pre-prod first.

permalink

fedilink

source

parent

hideshow 3 child comments

[–] mosiacmango@lemm.ee 11 points 2 years ago*

Pre-prod is ideal, but a pipe dream for many. Lots of folks barely get prod.

We still stagger patching so things like this only wipe some of the critical infrastructure, but that still causes needless issues.

permalink

fedilink

source

parent

[–] SomeGuy69@lemmy.world 11 points 2 years ago (1 child)

For security updates in critical infrastructure, no. You want that right away, in best case instant. You can't risk a zero day being used to kill people.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] Appoxo@lemmy.dbzer0.com 0 points 2 years ago* (last edited 2 years ago)

Even security updates can be uncritical or supercritical. Consult the patch notes or get burned lol

permalink

fedilink

source

parent