Windows Updates

[PHyndman]

I know that Plesk doesn't like some windows updates (exp. service packs!) and because of this we need to have automatic updates turned off.

However, I'm very concerned about the recent critical update from MS which addresses the problem whereby a server could be compromised fairly easily (now it's been identified hackers are beginnning to use it).

I had an urgent notification from another hosting company (sorry - would have used eUKHost but the site needs to regularly send out 4000+ emails) to update a dedicated windows server (no Plesk).

Does Plesk apply these critical updates or are our Windows servers vulnerable? ... any advise about what updates we can/can't/should/shouldn't apply would be really useful (perhaps something in the knowledgebase?) ... I also have a specific SQLServer update I want to install but very nervous of doing anything - I've killed more than one Plesk controlled server by installing an update it doesn't like!

[eUK-Martin]

Hello,

It's not entirely true that Plesk doesn't like Windows Updates. On shared/dedicated servers, we can run updates without experiencing any major problems. In the rare instance that a problem does happen, it's usually due to some permissions being changed, which can be easily fixed. In case of a major problem, we have high level contacts in the Plesk development team, and they can fix any problem. On a VPS, problems can happen if the Node doesn't have the updates you are trying to install. When it comes to Service Packs, this can completely kill the VPS.

If you see a Windows update available, it's always best to ask our VPS Team before installing it. Our VPS Team receive these types of questions daily, and are best placed to help you with your queries. If you also need help with a Dedicated Server, please contact our Windows Department. Due to the fact we have to patch our own servers, we are very knowledgeable about windows updates.

[PHyndman]

Thanks for the update Martin.

Unfortunately i put in a support request today to install MSSQL updates and got told that I couldn't have updates installed ... hopefully a misunderstanding and I'm currently in email conversation to see where I stand with these and other critical server updates!!

My server is 'attacked' on a daily basis so I'm very concerned that it is patched!

[eUKhost.com]

Hi Paul,

Please let me know the Ticket # as I can escalate your ticket to one of our senior windows system administrators. I'm not sure why our guys refused to install updates, but if there's some other reason then we will troubleshoot and reply to your ticket or here itself.

[eUKhost.com]

Hi Paul,

Just got an update from our windows vps team, that you have a windows vps with us and microsoft updates cannot be installed on a windows vps. We have opened a ticket with 'Parallels Support Team' and we will let you know once we hear from them.

[PHyndman]

Hi,

Thanks for that I think the ticket is: #IQW-14901-777 (from email subject) - I don't want to sound like anyone refused - that's so unlike the service I'm used to from eUKhost!

My original question/request may not have been clear enough ... I'm just particularly sensitive about this subject at the moment as my event logs are full of failed login attempts to both SQL and FTP (3-4 per second each!!!) - I hate to think what else is being attempted.

[eUKhost.com]

Hi Paul,

We are waiting for an update from Parallels support team as a ticket has been opened with them for this problem. I've asked our senior windows system admins to figure out something else to help you with this problem. Some of our members have helped our customers with similar problem in past and we know how to fix such inbound mssql attacks.

Please allow me couple of hours to get this sorted for you.

[PHyndman]

That's great - I'm in email conversation with Scott as we speak - he's sorting out my MSSQL attacks and dealing with the Parallels ticket.

Thanks again