Apply SP1 to Domain Controllers

[Shell02]

I plan to apply SP1 to my domain controllers currently running Windows 2003 Server.

First of all, are there any known issues or items to pay close attention to with this?

Also, are there any issues/downsides with upgrading the domain controllers in stages. IE, can I just apply SP1 to one of them now and do the others at a later date? Or, do I need to apply the service pack to all the domain controllers at the same time?

Thanks.

 

[ShackDaddy]

In general, SP1 install goes smoothly and there haven't been a lot of problems. But there are three things.

If you are running on Dell servers, check out this link:

http://support.dell.com/support/top...d=67DCB210B08F11DBB6C9D3546A7F9904&l=en&s=gen

Also need to look at these two articles since you are installing it on DC's. Don't assume that these issues will affect you, but know ahead of time that they are possible.

Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based or Windows Vista-based computers

http://support.microsoft.com/kb/899148

Installing security update MS05-019 or Windows Server 2003 Service Pack 1 may cause network connectivity between clients and servers to fail

http://support.microsoft.com/kb/898060

ShackDaddy
Shackelford Consulting

 

[wdoellefeld]

First of all, are there any known issues or items to pay close attention to with this?

I'm aware of nothing out of the ordinary, of course what's ordinary anyway? Make sure that the BIOS and any storage controller firmware is updated before-hand, that's key.

Also, are there any issues/downsides with upgrading the domain controllers in stages. IE, can I just apply SP1 to one of them now and do the others at a later date?

Yes, you can do this. I wouldn't wait forever to do the rest but it can be done in stages. Do the GC(s) first.

(yay! shameless advertising. my side business)

http://www.frcp.net

 

[porkchopexpress]

MS do recommend that you update all of your DC's as quickly as possible, i haven't always done this and haven't had any problems but it's worth remembering as MS product support will make a fuss if you do have to ring them.

Also it's worth remembering that 2003 SP2 is in the release candidate phase and should be released in the next month.

http://www.microsoft.com/technet/windowsserver/sp2.mspx

 

[porkchopexpress]

Also worth noting although i suspect there will be some issues.

Q. SP1 required a lot of application testing? Should I expect the same from SP2?

A. No, customers can expect a much simpler upgrade process with SP2. Windows Server 2003 SP1 addressed known vulnerabilities to Windows Server 2003 by tightening the authorization needed for some services and disabling others all together. In some cases these security enhancements resulted in unexpected behavior from applications

http://www.microsoft.com/technet/windowsserver/sp2/faq.mspx