Exchnage sp1 to sp3 Update Best Practices?

Can someone outline Patching Best Practices?
I need to upgrade Exchnage 2010 sp1 to sp3 for my potential customer?-There are Few questions in my mind
-How do i proceed with Multi site Deployment , can i patch all CAS, MBx and Edge servers for site A and then move to site 2?
-What are things that must be taken care of while performing whole process? -I've theoretical overview of how to proceed with the Upgrade, Just wanted to make sure if
there is anything else that needs to be taken care of before performing this to production environments?
Thanks in Advance.

Hi,
In addition to Will Martin's suggestion, I would like to verify if there is a DAG in your environment. If yes, please follow the steps below to upgrade it.
1. Run the StartDagServerMaintenance.ps1 script to put the DAG member into maintenance mode and prepare it for the update rollup installation.
2. Install the update rollup.
3. Run the StopDagServerMaintenance.ps1 script to take the DAG member out of maintenance mode and put it back into production.
4. Optionally rebalance the DAG by using the RedistributeActiveDatabases.ps1 script.
Hope this can be helpful to you.
Best regards,
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Amy Wang
TechNet Community Support

Similar Messages

IOS Update Best Practices for Business Devices

We're trying to figure out some best practices for doing iOS software updates to business devices. Our devices are scattered across 24 hospitals and parts of two states. Going forward there might be hundreds of iOS devices at each facility. Apple has tools for doing this in a smaller setting with a limited network, but to my knowledge, nothing (yet) for a larger implementation. I know configurator can be used to do iOS updates. I found this online:
https://www.youtube.com/watch?v=6QPbZG3e-Uc
I'm thinking the approach to take for the time being would be to have a mobile sync station setup with configurator for use at each facility. The station would be moved throughout the facility to perform updates to the various devices. Thought I'd see if anyone has tried this approach, or has any other ideas for dealing with device software updates. Thanks in advance.

Hi Bonesaw1962,
We've had our staff and students run iOS updates OTA via Settings -> Software Update. In the past, we put a DNS block on Apple's update servers to prevent users from updating iOS (like last fall when iOS 7 was first released). By blocking mesu.apple com, the iPads weren't able to check for or install any iOS software updates. We waited until iOS 7.0.3 was released before we removed the block to mesu.apple.com at which point we told users if they wanted to update to iOS 7 they could do so OTA. We used our MDM to run reports periodically to see how many people updated to iOS 7 and how many stayed on iOS 6. As time went on, just about everyone updated on their own.
If you go this route (depending on the number of devices you have), you may want to take a look at Caching Server 2 to help with the network load https://www.apple.com/osx/server/features/#caching-server . From Apple's website, "When a user on your network downloads new software from Apple, a copy is automatically stored on your server. So the next time other users on your network update or download that same software, they actually access it from inside the network."
I wish there was a way for MDMs to manage iOS updates, but unfortunately Apple hasn't made this feature available to MDM providers. I've given this feedback to our Apple SE, but haven't heard if it is being considered or not. Keeping fingers crossed.
Hope this helps. Let us know what you decide on and keep us posted on the progress. Good luck!!
~Joe

Should be deploying XP SP3 be best practice for WiFi 802.1x deployments?

A customer had standardized on Windows XP Service Pack 2 with Dell/Intel 3945BGN Chipset/Driver 11.1 (CCX 4).
I know that Service Pack 3 for XP has lots of 802.1x hotfixes, but is there a specific recommendation that customers should deploy XP SP3 if using 802.1x with Wi-Fi.
Currently after 30 minutes the customer is forced re-authentication which fails. I'm thinking this is a either a XP bug or Intel driver bug.

I just caught the BGN part of the Intel cards. I am just running the ABG. However, I did get a few of the new Dell laptops in that have the Intel BGN card. While trying to use Windows to control the card (on Vista Ultimate x32) I noticed that it had some issues allowing me to choose PEAP w/ MSCHAPv2. I could use PEAP, but it would default to GTC and not save the changes for MSCHAPv2. This was related to not having updated drivers on the machine. I did some poking around and also saw that XP had some similar issues with the new 802.11N cards and early driver releases. The fixes came from Dell and Intel though, and were not fixed by a Service Pack. Windows Zero is ok in a pinch but I definitely recommend the ccx supplicant / utility from the manufacturer over it.

EJB3 entity bean update, best practice

I have an ejb3 entity bean that models a time that can be reserved in a booking system.
I need a way to reserve the time for a specific user. Ofcourse the reservation should not overwrite if the time has already been reserved by another user.
What is the best/cleaneste way to provide this service?
I have thought of the following ways.
I could put a version field on the entity. When the user is set in the frontend the entitybean will check that the time is not already reserved. If not it will be sent backup to the stateless session bean for persisting. If the time has been reserved by another user in the meantime JPA will throw an exception since the version doesn't match any more. The frontend can then show the error to the user.
I could make the frontend call a method in a stateless session bean to reserve the time. The function could take the times primary id and the users primary id and loaded them from persistence. Then check if the time is already reserver else set the user and persist the time again. This should ofcourse be within a transaction and possibly also use a version attribute on the entity.

Only fields detected as persistent-dirty will be updated in the database record.
Laurent

Update Hierarchy Acrobat 9.x/Update Best Practices?

Because of the many problems with Acrobat that seem to be caused by updates, I find it is common that I have to reinstall Acrobat (we are using 9) on someones machine.
Our installer disc/files are Acrobat 9, missing of course all the updates. I typically run the updates seperately as I have them already downloaded...but I have been going in each step (9.12, 9.13, 9.14, etc.) which takes forever. By my count, I have 14 updates that need installed one by one after I install Acrobat. This is very time consuming.
Is there any idea or list of what updates I can skip b/c their fixes are included in the next release? Or, better yet is there a way that I can download a full installer of 9.4.4 or w/e is current that works with my 9.x activation keys?
Wondering what other system admins do with the growing updates for this application.

how would one create an installer as you mentioned? I created a batch file to install each update silently one at a time, but it is still a pain b/c if you don't disable UAC, you sit there and press continue every time...not ideal for widespread use.

JDBC / SQL Update Best Practice

My application updates a database table whenever a user modifies their profile.
I have two questions on this...
1. I've chosen to use PreparedStatements purely because it means I don't have to worry about special characters (e.g. '%"? in my data), and not because I re-use the statements. Is this a respected approach?
2. Is it worth dynamcially building the update SQL and adding paramaters because in most cases only a subset of the possible fields will be modified? (e.g. avoid setting col1="test" if col1 already equals "test"). Is there an acknowledged pattern / algorithm / library that does this?
Thanks,
Steve

My application updates a database table whenever a
user modifies their profile.
I have two questions on this...
1. I've chosen to use PreparedStatements purely
because it means I don't have to worry about special
characters (e.g. '%"? in my data), and not because I
re-use the statements. Is this a respected approach?Yes.
>
2. Is it worth dynamcially building the update SQL
and adding paramaters because in most cases only a
subset of the possible fields will be modified? Probably not. The only time this is going to matter is if there is a significantly sized field (like a blob) that often does not get updated. In that case you would probably want to exclude that.
(e.g. avoid setting col1="test" if col1 already equals
"test"). Is there an acknowledged pattern / algorithm
/ library that does this?Officially not as far as I know.
There are several patterns that I have used.
1. A modified flag for each field. If the set method is called then the flag is set to true.
2. A modified flag for each field. If the set method is called then the new value is compared to the old and the flag is set depending on the outcome.
3. The database layer holds (or retrieves) the previous data. It compares the two, noting the fields that have changed.
In the above note that primary keys must be dealt with. Usually the primary key is either set or not set. If not set then it is a new record. If set then it is an update.

Piloting Software Updates Best Practices

Hello All
I am in the process of configuring our Software Updates infrastructure. My plan is to deploy patch Tuesday updates first to a Pilot Group (Collection) and then to what I will call Production group (Collection). Now when it comes to the pilot phase of software
update testing of course we are just trying to see if any updates may prove problematic. Are there any other extensive testing methods or tips anyone use. Any helpful info would be appreciated.
Thanks,
Phillip
Phil Balderos

Generally, folks let the pilot users know that updates are coming and to do their normal "thing(s)". If there is something business critical, then having them test that would also be prudent. The pilot users should be representative of a broad
cross-section of users to try to catch any issues among all of the various tasks that go on. Getting informed pilot users involved is of course helpful also so that they can provide relevant and pertinent feedback. At the end of the day though, there are no
guarantees so you should stress this management.
Jason | http://blog.configmgrftw.com | @jasonsandys

Best Practice for Expired updates cleanup in SCCM 2012 SP1 R2

Hello,
I am looking for assistance in finding a best practice method for dealing with expired updates in SCCM SP1 R2. I have read a blog post: http://blogs.technet.com/b/configmgrteam/archive/2012/04/12/software-update-content-cleanup-in-system-center-2012-configuration-manager.aspx
I have been led to believe there may be a better method, or a more up to date best practice process in dealing with expired updates.
On one side I was hoping to keep a software update group intact, to have a history of what was deployed, but also wanting to keep things clean and avoid issues down the road as i used to in 2007 with expired updates.
Any assistance would be greatly appreciated!
Thanks,
Sean

The best idea is still to remove expired updates from software update groups. The process describes in that post is still how it works. That also means that if you don't remove the expired updates from your software update groups the expired updates will
still show...
To automatically remove the expired updates from a software update group, have a look at this script:
http://www.scconfigmgr.com/2014/11/18/remove-expired-and-superseded-updates-from-a-software-update-group-with-powershell/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Server Core 2008 R2 SP1 - AD DS Best Practice Analyzer Scans Don't Produce Any Output

Hi,
This is a re-post moving this discussion to the recommended forum "Server Core" from here:
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/cc33d429-88e0-4450-a73c-361e395fd217.
I am having problems producing any output for any AD DS Best Practice Analyzer Scans on a Windows Server Core 2008 R2 SP1 Domain Controller.
I have imported the "ServerManager" and "BestPractices" PS modules on that Server by running the following commands:
Import-Module ServerManager
Import-Module BestPractices
I've then run
get-BPAModel, to find out what best practice scan models are availale, this returns the following output:
Id
LastScanTime
Microsoft/Windows/DirectoryServices     Never
Microsoft/Windows/DNSServer               Never
I then run all the BPA scans on that box:
Get-BPAModel | Invoke-BPAModel
This returns the following output:
ModelId
Success Detail
Microsoft/Windows/DirectoryServices True       (InvokeBpaModelOutputDetail)
Microsoft/Windows/DNSServer          True       (InvokeBpaModelOutputDetail)
Since the BPA invocation results weren’t displayed automatically, I entered the following command to see them:
Get-BPAModel | Get-BPAResult | Out-File "D:\Source\BPA.txt"
This command will create a text file with the scan results but I only see the results of the DNSServer scan, not the DirectoryServices scan.
I have also tried to view the results in a HTML format by running the following command but still only see the DNSServer scan results:
Get-BPAModel | Get-BPAResult | ConvertTo-Html | Set-Content d:\Source\BPA.htm
I have also tried exeucuting the scan ONLY for the "Microsoft/Windows/DirectoryServices" model but can't get any results to be returned. I have also connected using server manager from a Full install of Server 2008 R2 SP1 but that
doesn't seem to show any results under the "Best Practices Analyzer" section when the "Active Directory Domain Services" node is selected, all 4 tabs ("Noncompliant", "Excluded", "Compliant" and "All") show zero (0). However, the summary text above the
tabs does show when the last scan was performed. which seems to be correct.
Is there something special that needs to be done to produce the BPA results for the "Microsoft/Windows/DirectoryServices" BPA model on Server Core 2008 R2 SP1?
BTW: The Forest/Domain is W2K3R2 Native, this is the first W2K8R2 DC in the environment and I have installed .NET 4 framework (Server Core) to support Powershell 3, also installed.
Thanks, Paul.
belpad

Hi Diana,
OK, pretty sure I've now found the root cause of the issue I've described above.
I was also looking into Windows Update Agent issues for these W2K8R2 Server Core DC's, where no updates would be applied via WSUS (configured via GPO) and would fail with "FATAL: CBS called Error with 0x8000ffff windows update agent server
core".
Yesterday, I managed to get one of the W2K8R2 Server Core DC's (WSUS updates) working again by removing one of the .NET 4 Framework security updates (KB2600211) which was manually applied when the server was initially setup. .NET 4 (Server Core Edition
http://www.microsoft.com/en-us/download/details.aspx?displaylang=en&id=22833) was installed as a pre-requisitie for Powershell 3. Once this update was removed, the affected server core DC was restarted and WSUS updates started to get applied.
So I followed the same procedure on the other server core DC but this did not resolve the WSUS issue this time.  Next, I did further investigation into the Windows Update Agent problem. This led me to the following article:
http://blogs.technet.com/b/brad_rutkowski/archive/2008/07/03/windows-update-fails-with-8000ffff-e-unexpected.aspx which described an issue with NTFS permissions being set incorrectly on C: drive, with the "BUILTIN\Users" group completely
missing on the C: drive.
I found the affected Server Core DC also had this issue and when the "BUILTIN\Users" was assigned permissions on the C: drive as described above, and the Windows Update Agent re-started, the Server Core DC started to install all required updates
configured via WSUS.
Next, I ran the Directory Service BPA, which now produces the desired output either locally or remotely via Server Manager.
Therefore, I can only assume that the Directory Service BPA also uses "Network Service" much like WUAUSERV (Windows Update Agent), which requires access to the C: drive via the "BUILTIN\Users" assignment.
So this has subsequently led me to check the C: drive (%systemdrive%) permissions across multiple W2K8R2 machines, all of which showed differing assigned permissions, as follows:
1. W2K8R2 Server Core DC - With Directory Services BPA and Windows Update Agent Not Working
C:\>icacls c:\
c:\ BUILTIN\Administrators:(OI)(CI)(F)
    CREATOR OWNER:(OI)(CI)(IO)(F)
    NT AUTHORITY\INTERACTIVE:(OI)(CI)(RX)
    NT AUTHORITY\SYSTEM:(OI)(CI)(F)
2. W2K8R2 Server Core DC - With Directory Services BPA and Windows Update Agent Working OK
C:\>icacls c:\
c:\ NT AUTHORITY\SYSTEM:(OI)(CI)(F)
    BUILTIN\Administrators:(OI)(CI)(F)
    BUILTIN\Users:(OI)(CI)(RX)
    BUILTIN\Users:(CI)(AD)
    BUILTIN\Users:(CI)(IO)(WD)
    CREATOR OWNER:(OI)(CI)(IO)(F)
3. W2K8R2 Full DC - With Directory Services BPA and Windows Update Agent Working OK
C:\>icacls c:
c: NT SERVICE\TrustedInstaller:(F)
   NT SERVICE\TrustedInstaller:(CI)(IO)(F)
   NT AUTHORITY\SYSTEM:(M)
   NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F)
   BUILTIN\Administrators:(M)
   BUILTIN\Administrators:(OI)(CI)(IO)(F)
   BUILTIN\Users:(RX)
   BUILTIN\Users:(OI)(CI)(IO)(GR,GE)
   CREATOR OWNER:(OI)(CI)(IO)(F)
4. W2K8R2 Server Core DHCP Server (Migrated from W2K3 with Server Migration Tools) - With DHCP BPA and Windows Update Agent Working OK
C:\>icacls c:
c: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
   BUILTIN\Administrators:(OI)(CI)(F)
5. W2K8R2 Server Core DHCP Server (Migrated from W2K3 with netsh) - With DHCP BPA and Windows Update Agent Working OK
C:\>icacls c:
c: NT AUTHORITY\SYSTEM:(OI)(CI)(F)
   BUILTIN\Administrators:(OI)(CI)(F)
   BUILTIN\Users:(OI)(CI)(RX)
   BUILTIN\Users:(CI)(AD)
   BUILTIN\Users:(CI)(IO)(WD)
   CREATOR OWNER:(OI)(CI)(IO)(F)
None of the above servers have a Group Policy or any in-house scripts defined that configure C: drive permissions. It seems odd that there should be such a variance in the C: (%systemdrive%) drive permissions across the above servers, with only
scenarios 2 and 5 above have matching permissions. I can only imagine that maybe some software or software update might be causing this.
By reviewing the above output, it seems there is also a difference between the C: drive permissions of W2K8R2 Server Core and W2K8R2 Full. Not sure if this is by design?
Is there any Microsoft Documentation describing what the default %systemdrive% NTFS permissions should be for W2K8R2 Server Core and Full. Furthermore, do these permissions change when the various infrastructure roles are installed and enabled i.e.
Domain Controller, DHCP etc. I ask, since I would like to use the correct set of permissions for %systemroot% in each scenario. Please advise if I should be asking this question in a different forum?
belpad

Best practice - Heartbeat discovery and Clear Install Flag settings (SCCM client) - SCCM 2012 SP1 CU5

Dear All,
Is there any best practice to avoid having around 50 Clients, where the Client version number shows in the right side, but client doesn't show as installed, see attached screenshot.
SCCM version is 2012 SP1 CU5 (5.00.7804.1600), Server, Admin console have been upgraded, clients is being pushed to SP1 CU5.
Following settings is set:
Heartbeat Discovery every 2nd day
Clear Install Flag maintenance task is enabled - Client Rediscovery period is set to 21 days
Client Installation settings
Software Update-based client installation is not enabled
Automatic site-wide client push installation is enabled.
Any advise is appreciated

Hi,
I saw a similar case with yours. They clients were stuck in provisioning mode.
"we finally figured out that the clients were stuck in provisioning mode causing them to stop reporting. There are two registry entries we changed under [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CCM\CcmExec]:
ProvisioningMode=false
SystemTaskExcludes=*blank*
When the clients were affected, ProvisioningMode was set to true and SystemTaskExcludes had several entries listed. After correcting those through a GPO and restarting the SMSAgentHost service the clients started reporting again."
https://social.technet.microsoft.com/Forums/en-US/6d20b5df-9f4a-47cd-bdc3-2082c1faff58/some-clients-have-suddenly-stopped-reporting?forum=configmanagerdeployment
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Best Practice for Software Update Structure?

Is there a best practice guide for Software Update Structure? Thanks. I would like to keep this neat and organized. I would also like to have a test folder for updates with test group. Thanks.

Hi,
Meanwhile, please refer to the following blog get more inspire.
Managing Software Updates in Configuration Manager 2012
http://blogs.technet.com/b/server-cloud/archive/2012/02/20/managing-software-updates-in-configuration-manager-2012.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Best Practice for CQ Updates in complex installations (clustering, replication)?

Hi everybody,
we are planning a production setup of CQ 5.5 with an authoring cluster replicating to 4 publisher instances. We were wondering what the best update process looks like in a scenario like this. Let's say, we need to install the latest CQ 5 Update - which we actually have to -:
Do we need to do this on every single instance, or can replication be utilized to distribute updates?
If updating a cluster - same question: one instance at a time? Just one, and the cluster does the rest?
The question is really: can update packages (official or custom) be automatically distributed to multiple instances? If yes, is there a "best practice" way to do this?
Thanks for any help on this!
Henning

Hi Henning,
The CQ5.5 servicepacks are distributed as CRX packages. You can replicate these packages and on the publishs they are unpacked and installed.
In a cluster the situation is different: You have only 1 repository. So when you have installed the servicepack on one node, the new versions of bundles and other stuff is unpacked to the repository (most likely to /libs). Then the magic (essentially the JcrInstaller) takes care, that the bundles are extracted to started.
I would not recommend to activate the service pack in a production environment, because then all publishs will be updated the same time. And as a restart is required, you might encounter downtimes. Of course you can make it work when you play with the replication agents :-)
cheers,
Jörg

Best practice - updating figure numbers in a file, possibly to sub-sub-chapters

Hi,
I'm a newbie trying to unlearn my InDesign mindset to work in FrameMaker. What is best practice for producing figure numbers to accompany diagrams throughout a document? A quick CTRL+F in the Framemaker 12 Help book doesn't seem to point me in a particular direction. Do diagrams need to be inserted into a table, where there is a cell for the image and a cell for the figure details in another? I've read that I should use a letter and colon in the tag to keep it separate from other things that update, e.g. F: (then figure number descriptor). Is there anything else to be aware of, such as when resetting counts for chapters etc?
Some details:
Framemaker12.
There are currently 116 chapters (aviation subjects) to make.
Each of these chapters will be its own book in pdf form, some of these chapters run to over 1000 pages.
Figure number ideally takes the form: "Figure (a number from one of the 1-116 chapters used) - figure number" e.g. "Figure 34 - 6." would be the the 6th image in the book 'chapter 34'.
The figure number has to cross reference to explaining text, possibly a few pages away.
These figures are required to update as content is added or removed.
The (aviation) chapter is an individual book.
H1 is the equivalent of the sub-chapter.
H2 is the equivalent of the sub-sub-chapter.
H3 is used in the body copy styling, but is not a required detail of the figure number.
I'm thinking of making sub-chapters in to individual files. These will be more manageable on their own. They will then be combined in the correct order to form the book for one of these (1 of 116) subject chapters.
Am I on the right track?
Many thanks.
Gary

Hi,
Many thanks for the link you provided. I have implemented your recommendation into my file. I have also read somewhere about sizing anchored frames to an imported graphic using 'esc' + 'm' + 'p'.
What confuses me, coming from InDesign is being able to import these graphics at the size they were made ( WxH in mm at 300ppi) and keeping them anchored to a point in the text flow.
I currently have 1 and 2 column master pages built. When I bring in a graphic my process is:
insert a single cell table on the next space after current text > drop the title below the cell > give the title a 'figure' format. When I import a graphic it either tries to fit it in the current 2 column layout with only part of it showing in a box which is half the width of a single column!
A current example: page 1 (2 column page) the text flows for 1.5 columns. At the end of the text I inserted a single cell table, then imported and image into the cell.
Page 2 (2 column page) has the last line of page 1's text in the top left column.
Page 3 (2 page column) has the last 3 words of page 1 in its top left column. The right column has the table in it with part of the image showing. The image has also bee distorted, like it's trying to fit. These columns are 14 cm wide, the cell is 2 cm wide at this point. I have tried to give cells for images 'wider' attributes using the object style designer but with no luck.
Ideally I'm trying to make 2 versions. 1) an anchored frame that fits in a 1 column width on a 2 column width page. 2) An anchored frame that fits the full width of my landscape pages (minus some border dimension), this full width frame should be created on a new proceeding page. I'd like to be able drop in images to suit these different frames with as much automation as possible.
I notice many tutorials tell you how to do a given area of the program, but I haven't been able to find one that discusses workflow order. Do you import all text first, then add empty graphic boxes and/or tables throughout and then import images? I'm importing text from Word, but the images are separate, having been vectored or cleaned up in Photoshop - they won't be imported from the same word file.
many thanks

Best Practice for Updating children UIComponents in a Container?

What is the best practice for updating children UIComponents in response to a Container being changed? For instance, when a Canvas is resized, I would like to update all the children UIComponents height and width so the content scales properly.
Right now I am trying to loop over the children calling InvalidateProperties, InvalidateSize, and InvalidateDisplayList on each. I know some of the Containers such as VBox and HBox have layout managers, is there a way to leverage something like that?
Thanks.

you would only do that if it makes your job easier. generally speaking, it would not.
when trying to sync sound and animation i think most authors find it easiest to use graphic symbols because you can see their animation when scrubbing the main timeline. with movieclips you only see their animation when testing.
however, if you're going to use actionscript to control some of your symbols, those symbols should be movieclips.

Best practice for updating ATWRT (Characteristic Value) in AUSP

I've notice that when we change the Characteristic Value of a Classification, that it does not update in the MM record. We have to go into MM02 for each material number that references Char Value and manually change it for row in AUSP to get updated.
Should i just create a report to Loop through and update table AUSP directly? Or is there a better way to do this via a function or BAPI etc? Wanting to know what best practice is recommended.

Hi Scott
You can use a BAPI to do that.
Check the following thread:
BAPI to update characteristics in Material master?
BR
Caetano

Exchnage sp1 to sp3 Update Best Practices?

Similar Messages

Maybe you are looking for