For a very long time, the update mechanism for both Windows clients and Windows servers have been the same. With Windows 8 and Windows Server 2012 this has changed.
Even though I’d already found out that something had changed with the Windows 8/Windows Server 2012 update mechanism by using it, I didn’t really know what changed and why.
- Windows 8 Modern (Metro) Apps security patching does not work the same as regular security patching. For more information, read “Microsoft’s new security patching routine raises concerns“.
- Default behavior after you install an important update in Windows 8 or in Windows Server 2012 is that you receive a notice that you have to restart the computer in three days. If the restart does not occur in three days, the computer displays a 15-minute countdown and then automatically restarts. By default, this automatic restart is delayed if the computer is locked, and the countdown will begin the next time that you sign in to the computer. Update KB2835627 has been released that introduces a new registry key called AlwaysAutoRebootAtScheduledTime which enables you to configure a forced restart after installation if desired.
- This great blog post provides more insight: “Managing Updates with Deadlines in an era of Automatic Maintenance“. The reactions are also very interesting.Some of the key takeaways from this post:
- A new feature called Automatic Maintenance, runs nightly and performs various tasks such as lightly defragmenting hard drives (or TRIMming SSDs if necessary), checking, repairing, and optimizing the system component store, running anti-virus scans, installing updates, and more.
- The setting for when to download and install updates doesn’t work in the same way as it did. While you can still set Windows Update to download updates and install them automatically or not, the day-of-the-week setting is not effective. It is included in the automatic maintenance and there isn’t a way to individually specify which maintenance tasks run on which day.
- The Windows Update Agent doesn’t have to be active in the background all the time because of this. This consolidation reduces system resource usage and battery usage.
- If you want to be in control of when updates will be installed you have to use WSUS and set deadlines for updates.
Even though I understand the reasoning behind the change, I would have preferred that Microsoft gave customers options to choose their preferred method. In my opinion this method makes sense for clients, but not so much for servers.
Also for some (smaller) companies the specific day and time patching method (including downloading from Microsoft Update) worked fine and now they might have to install, configure and maintain a WSUS server (including patch approvals) to achieve the same result.
What do you think about this ? Leave a comment on either my blog or on the original blog post : Managing Updates with Deadlines in an era of Automatic Maintenance
Tags: ICT, Metro App, metro application, Microsoft, Modern App, modern application, patching, security, update, Update Management, Update Services, updates, Windows, Windows 2012, Windows 2012 Server, Windows 8, Windows Server 2012, Windows Server Update Services, WSUS
As some of you might know, the Windows 8.1 Preview and Server 2012 R2 Preview (code name Windows Blue) will become available on the 26th of June. Personally I’m looking forward to both of them and can’t wait for it. Also for those who missed it, The Windows 8.1 / Windows RT 8.1 update will be free. The final RTM version of Windows 8.1 is expected to be available August 1st.
When you’re planning to install a new version, you might want to prepare for it. Even though I tried to keep it as generic as possible, some of the steps described are not applicable to Windows RT but you should be able to understand what the goal is. You can probably also re-use these preparations when you want to update from the Preview version to the RTM version.
Preparations could include, but are not limited to:
- Determining if you can/want to install the update.
- Determining how you are going to run the Windows 8.1 Preview. Some functionality is best tested on hardware installations, but virtualized installations can be more convenient/flexible.
- Virtualized (by example using Client Hyper-V)
- Install Windows 8 already and wait for the 8.1 Preview to become available.
- Will consume more space.
- Will allow you to install the 8.1 RTM.
- Wait for full Windows 8.1 Preview ISO to become available.
- Will consume less space.
- Might not allow you to install the 8.1 RTM version.
- Physical
- Create a new Windows To Go (WTG) installation.
- On an officially supported WTG certified storage device.
- On an unofficial non WTG supported storage device.
- Create a dual/multi boot environment on a physical disk.
- Create a new installation.
- Gather required drivers and store them in an easy to access location.
- Gather applications you want to install.
- Install.
- Installation directly to disk.
- Use the boot from VHD method
- Update your existing installation.
- Ensure your important data is safe prior to updating. Even though the update should not destroy data, there is always a chance that it might.
- Ensure you have recovery media and/or create a USB recovery drive.
- Move/backup your data.
- Verify if the new location / backup contains all your data. With backups, verify if you can restore
- Sync to cloud services (Skydrive, Dropbox, Google Drive).
- Realize this is not the same as a backup.
- Document the installed applications (using PowerShell):
- For Modern/Metro applications:
Get-AppxPackage | Export-Csv -NoTypeInformation -path “C:\MyMetroApplications.csv”
- For regular applications:
Get-ItemProperty HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\* | Select DisplayName, DisplayVersion, Publisher, InstallDate, HelpLink, UninstallString | Export-Csv -NoTypeInformation -path “C:\MyRegularApplications.csv”
- Check if your current Windows 8 installation is healthy and if it is not, make it healthy again before installing the 8.1 Preview.
- Install 8.1 Preview when it is available through the Windows Store
- In the past I’ve seen issues with Service Pack updates caused by anti-virus solutions. So you might want to disable it until the installation has completed.
- If you get an error “The windows 8.1 preview isn’t available right now. Please try again later.” take a look here.
With TechEd Europe 2013 in Barcelona and the Microsoft Build 2013 in San Francisco this week there’s probably a lot more news coming. So you might want to keep an eye on news on all websites. You can also check live streams on Channel 9.
I hope this was informative. If you have any other questions, suggestions or just want to share what you’re looking forward to the most, please leave a comment.
Tags: appx, Build, Channel 9, channel9, Computex, disk cleanup, DISM, ICT, Metro, metro application, Microsoft, modern application, New in Windows 8.1, Outlook 2013 RT, preparation, preparations, Preview, requirements, security, teched, treesize, treesize free, what's new in Windows 8.1, Wikipedia, Windows, Windows 8.1, Windows 8.1 Preview, Windows To Go, WTG
Last week I got a beta exam invite for exam “70-688 Managing and Maintaining Windows 8” (in beta it is 71-688). As with most beta exams lately, you only have max two weeks to prepare and there are no books available yet that you can use to study. Therefore I start with looking at what skills are being measured and if there are preparation guides available. From there on I start looking for relevant learning resources for each subject and adding them to the skills that are being measured for easy future reference.
I hope it is useful for you as well.
Read the rest of this entry »
Tags: 070-688, 071-688, 70-688, 71-688, ACT, Action center, AEM, Agentless Exception Monitoring, App-V, App-V 5.0, application compatibility toolkit, application reputation, Application Virtualization, Applocker, asset, asset inventory, authentication, Azure, backup, bcdboot, bcdedit, Beta, biometrics, BitLocker, BranchCache, certificate, client hype-rv, CMAK, computer inventory report, ConfMgr, ConfMgr 2012, ConfMgr2012, Connection Manager, Connection Manager Administration Kit, DaRT, DaRT 8, DCA, DEM, deployment strategy, Desktop Error Monitoring, Diagnostic and Recovery Toolkit, DirectAccess, DirectAccess Connectivity Assistant, disk image, disk image backup, DISM, DNSSEC, domain, EAS, EFS, EHD, Encrypted Hard Drive, Encrypting File System, Endpoint Protection, Exam, Exchange Active Sync, Exchange Activesync, file history, find and fix problems with devices, Firewall, folder redirection, group policy, hardware, hardware and devices troubleshooter, high-touch, Hyper-V, image, IPv4, IPv6, Learning, learning resource, learning resources, lite-touch, Live Mesh, live service, live services, LiveMesh, local account, Managing and Maintaining Windows 8, MBAM, MDOP, MDOP 2011 R2, metered network, metering, metro application, microsoft account, Microsoft Application Virtualization, Microsoft Azure, Microsoft Bitlocker Administration and Monitoring, Microsoft Desktop Optimization Pack, migrate, migration, mobile, mobile device, mobile device management, multifactor authentication, name resolution, native boot, Near Field Communication, network, network metering, NFC, off-network, Office 365, Office 365 Desktop Setup, offline files, Packaged App, PC refresh, PC reset, picture password, Powershell, PowerShell Remoting, prep guide, preparation, preparation guide, prepare, print management, printer, rdp, RDS, Recimg, Recimg.exe, recovery drive, recovery media, remote access, remote desktop protocol, Remote Desktop Services, Remote Server Administration Tools, RemoteApp, removable storage devices, report, roaming profiles, roaming user profiles, RSAT, SCCM 2012, SCCM2012, Secure SIM, security, shim, sideload, sideloader, Skydrive, Skydrive Pro, smart card, Software Restriction Policies, SRP, Storage Spaces, study, Sync center, System Center, System Center 2012, System Center 2012 Endpoint Protection, System Center 2012 Endpoint Protection client, System Center Configuration Manager, System Center Configuration Manager 2012, System Center Desktop Error Monitoring, System Center Endpoint Protection, system restore, trust, trust relationship, Trusted PC, two-factor authentication, UE-V, upgrade, upgrade path, User Experience Virtualization, user state migration tool, usmt, VDI, vhd, Virtual Desktop Infrastructure, virtual hard disk, virtualization, VPN, wet, Windows, Windows 7 file recovery, Windows 8, windows 8 application, Windows 8 FIle History, Windows 8 Image, Windows 8 PC refresh, Windows 8 PC reset, windows 8 upgrade path, Windows Azure, Windows Defender, windows easy transfer, Windows Firewall, Windows Intune, Windows Recovery Environment, Windows store, Windows To Go, Windows Update, wireless, workgroup, WRE, WSUS, zero-touch
blog.bjornhouben.com 