Do not automatically apply Microsoft Service Packs for the Operating system or SQL Server. Cisco qualifies service packs through extensive testing and defines compatible service packs in the Hardware & System Software Specification (Bill of Materials) document for each product.
The Microsoft Windows Automatic Update Client can be configured to poll a server that is running Microsoft Software Update Services (SUS) or Windows Server Update Services in place of the default Windows Update website to retrieve updates.
This is the recommended approach to be able to selectively approve updates and determine when they get deployed on production servers.
To use Automatic Updates with a server that is running Software Update Services, see the Software Update Services Deployment white paper. To view this white paper, see the following Microsoft website: http://www.microsoft.com/windowsserversystem/updateservices/techinfo/previous/susdeployment.mspx.