Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> Re: installing security patches on a Windows database server (was "Oracle 10g for Windows")

Re: installing security patches on a Windows database server (was "Oracle 10g for Windows")

From: Jeff Herrick <jherrick_at_igs.net>
Date: Thu, 12 Feb 2004 15:22:26 -0500 (EST)
Message-ID: <20040212151034.K94075-100000@mailbox1.avalonworks.net>

Most patches have a 'silent' as well as a 'no-reboot' option. The problem is that they are not always the same for all patches so you have to run the patch from a command line first with the '/?' option to discover them (usually /S and /X but it varies)

With these options you can copy the patch to multiple servers and then remotely execute using something like PSEXEC from SysInternals. After this is done the reboots can be scheduled based on a balance between required availability of the server and the critical nature or risk exposure of the problem that the patch fixes.

Of course you should also have tested the patch before rolling it out =8-0

Multiple patches that would normally require a series of reboots can be 'chained' together using the QCHAIN program available from the Microsoft KB. This way only one reboot of your production server(s) is necessary. Note that only QCHAIN has the smarts to determine which DLL versions are to be swapped around. If you just strung a set of patches together using /quiet /noreboot you risk having a broken O/S after the reboot

HTH Jeff Herrick

On Thu, 12 Feb 2004, Jacques Kilchoer wrote:

> I'm sure that with proper management etc. a Windows database server can =
> be reliable. But one thing that puzzles me - when you install a =
> Microsoft security patch, the dialog box at the end (almost) always says =
> "Reboot the machine now." I religiously do that since all of my Windows =
> databases can be brought down (they're used for development.) What do =
> people do with a production database server?
>
> > -----Original Message-----
> > Mercadante, Thomas F
> >=20
> > ...
> >=20
> > I have windows databases that have been running for 3 years=20
> > now. *Never*
> > does the machine crash. And *never* do we reboot "just=20
> > because we should".
> >=20
> > ...
> ----------------------------------------------------------------
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> ----------------------------------------------------------------
> To unsubscribe send email to: oracle-l-request_at_freelists.org
> put 'unsubscribe' in the subject line.
> --
> Archives are at http://www.freelists.org/archives/oracle-l/
> FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
> -----------------------------------------------------------------
>



Please see the official ORACLE-L FAQ: http://www.orafaq.com

To unsubscribe send email to: oracle-l-request_at_freelists.org put 'unsubscribe' in the subject line.
--
Archives are at http://www.freelists.org/archives/oracle-l/
FAQ is at http://www.freelists.org/help/fom-serve/cache/1.html
-----------------------------------------------------------------
Received on Thu Feb 12 2004 - 14:22:26 CST

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US