Microsoft Patch Bugs
Making sure your business's computers and servers are up-to-date with the latest Microsoft Security Patch Updates is a critical piece in securing your network. However sometimes the updates Microsoft releases can actually do damage themselves if the there are bugs in them. In Microsoft's December release there were 2 updates that we recommend to NOT install as they can cause some major issues.
The first is the KB3004394 patch for Windows 7 and Server 2008 machines and relates to Digital Root Certificates. However after installing this update it will actually block valid first and third-party software and even other Windows Updates from installing. So be sure to not roll out this update until Microsoft fixes it!
Secondly KB2986475 patch for Exchange Server 2010 SP3 may block your Microsoft Outlook email client from being able to connect to the server and send/receive email. It is highly recommended to not install this one either.
The easiest way to go about fixing or controlling these security updates is through an automated patch management system. The built-in "Automatic Updates" is a good starting point however if you have this enabled on all 50 of your office computers you may have to manually go around to all 50 computers to fix them when a bad patch like this comes out. That is never any fun! For optimal efficiency and reliability be sure to have a complete patch management system in place that allows you to globally push out or in this case deny patches as they are released and do not rely on the built-in Windows "Automatic Updates" feature.. Be sure to contact your IT SUPPORT team to make sure you are covered.
