Windows Server Patching

Reboot Pending Check

You can check whether your server is pending a reboot after patching using this Powershell command...

Get-Item 'HKLM:SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired'

Windows Update

Server Manager

To enable automatic Windows Updates via Server Manager. (Screenshots from Windows Server 2012)

Click on the link next to Windows Update. In this case the link shows "Not configured".

Manual Override

You can wait for the patches to be installed automatically in the maintenance window. Or you can instigate installation via these screens...

sconfig

sconfig

6 (Windows Updates)

a (all available) or r (recommended)

n (close menu without installing updates)

Powershell

get-windowsupdate

Install the cmdlet if necessary, using...Install-Module -Name PSWindowsUpdate

Uninstall

You can uninstall an update by going to Settings>Update & security>Windows Update>Advanced option>View your update history>Uninstall update.

Other Patching Tools

  • WSUS

  • SCCM

  • ManageEngine Desktop Central

  • TODO: others