applying security and software update patches from third-party vendors is not
without risk. Although the risk is small, subtle changes in functionality or
extra layers of code can alter the overall performance of Cisco Contact Center
Assess all security
patches released by Microsoft and install those patches deemed appropriate for
your environment. Do not automatically enable Microsoft Windows Update. The
update schedule can conflict with other
activity. Consider using Microsoft Software Update Service or similar patch
management products to selectively apply Critical and Important security
patches. Follow the Microsoft guidelines about when and how you should apply
security exposure of the critical security patches released by Microsoft for
Windows, IIS, and SQL. Apply critical security patches as you deem necessary
for your site.
Do not automatically
apply Microsoft Service Packs for the Operating system or SQL Server. Cisco
qualifies service packs through extensive testing and defines compatible
service packs in the Hardware & System Software Specification (Bill of
Materials) document for each product.
You can configure
the Microsoft Windows Automatic Update Client to poll a server that is running
Microsoft Software Update Services (SUS) or Windows Server Update Services,
rather than the default Windows Update website, to retrieve updates.
enables you to selectively approve updates and determine when they get deployed
on production servers.
Configure Server to
Use Alternate Windows Update Server
To configure the
server to use an alternate Windows Update server:
Start > Run
regedit in the dialog box.
If you use
Registry Editor incorrectly, you can cause serious problems that require you to
reinstall your operating system. Cisco cannot guarantee that you can solve
problems that result from using the Registry Editor incorrectly. Use the
Registry Editor at your own risk and make backups as appropriate.
locate and then click the following key in the registry:
Edit (or add)
the following setting:
Value name: UseWUServer
Registry Value Type:
Value data: Set this
value to 1 to configure Automatic Updates to use a server that is running
Software Update Services instead of Windows Update.
To determine the
server that is running SUS that your client computers and servers go to for
their updates, add the following registry values to the registry: