none
SP2016 Security Updates RRS feed

  • Question

  • Hi All, I have few questions about security update for SP2016.

    https://blog.stefan-gossner.com/page/2/

    Is there best guide line to follow for Security Updates whiling applying? 

    Does the update applies on each server? Front-End, Application, SQL ?

    Or Just the Front-End?

    Do I need to run psconfig?

    Please share blog or guidelines.

    Thanks

     


    Abenet

    Tuesday, August 6, 2019 3:19 PM

Answers

  • Before Installing CU it's good to stop Search Service. and make sure you start the Search Service before running PSConfig. 

    You Mean running PSConfig in all the SharePoint Servers at same time ? if that was your question No, you shouldn't run the PSConfig in all the Servers at a time first run from the App / Central Admin Server once it's finished then run it on Web Server.

    Thanks & Regards,


    sharath aluri

    • Marked as answer by NewET12345 Tuesday, August 20, 2019 3:08 AM
    Tuesday, August 6, 2019 4:54 PM

All replies

  • For Security updates you can check in the below articles:

    https://sharepointupdates.com/Patches

    https://docs.microsoft.com/en-us/officeupdates/sharepoint-updates

    Yes this updates have to run on all SharePoint Servers, but not for SQL

    Yes you have to run PSCONFIG on all SharePoint Servers once you installed the CU's.

    PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

    Thanks & Regards,


    sharath aluri

    Tuesday, August 6, 2019 3:25 PM
  • Do I need to suspend to the sql server and run start the job?

    Thanks again.


    Abenet

    Tuesday, August 6, 2019 3:42 PM
  • No, you don't touch SQL at all. for running PSConfig you need for your SharePoint to communicate with SQL. 

    Just FYI, Make sure you don't run PSCONfIG on Production on Day time, because it causes outage of your SharePoint make sure you run at after hours.

    Thanks & Regards, 


    sharath aluri

    Tuesday, August 6, 2019 3:46 PM
  • No Sharath, I meant to Say Search ServiceApplication.

    And alos, Do I need to  enable side-by-side upgrade capabilities?


    Abenet

    Tuesday, August 6, 2019 4:28 PM
  • Before Installing CU it's good to stop Search Service. and make sure you start the Search Service before running PSConfig. 

    You Mean running PSConfig in all the SharePoint Servers at same time ? if that was your question No, you shouldn't run the PSConfig in all the Servers at a time first run from the App / Central Admin Server once it's finished then run it on Web Server.

    Thanks & Regards,


    sharath aluri

    • Marked as answer by NewET12345 Tuesday, August 20, 2019 3:08 AM
    Tuesday, August 6, 2019 4:54 PM
  • Hi, Abenet,

    For updating SharePoint Farm, you will need to install the updates on all servers with SharePoint installed and run the configuration wizard after installation on each server. Before the installation, it is needed to stop the search service application. You must install the same patch on all servers regardless of what type of patch it is. You must run the config wizard/psconfig on all SharePoint servers in the farm after the patch has been applied to all servers. You should not have extended time between installing and running the Config Wizard/psconfig. Since installation requires downtime, it is best to do both at the same time

    And for more detailed and official guide, please have a check on this: https://docs.microsoft.com/en-us/sharepoint/upgrade-and-update/deploy-updates-for-sharepoint-server-2016

    Especially this:https://docs.microsoft.com/en-us/SharePoint/upgrade-and-update/install-a-software-update

    Thread of similar question with discussions:https://sharepoint.stackexchange.com/questions/187392/whats-the-best-practice-for-sharepoint-security-update

    Best Regards

    Jerry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    SharePoint Server 2019 has been released, you can click here to download it.
    Click here to learn new features. Visit the dedicated forum to share, explore and talk to experts about SharePoint Server 2019.

    • Proposed as answer by Michael Han6 Thursday, August 8, 2019 7:34 AM
    Wednesday, August 7, 2019 6:26 AM
  • PSConfig.exe -cmd upgrade -inplace b2b -wait -cmd applicationcontent -install -cmd installfeatures -cmd secureresources -cmd services -install

    What if i don't enable b2b, do I need t use the command line above? I only have 1FE 1App server.

    Please let me Know


    Abenet

    Friday, August 9, 2019 3:16 AM
  • Yes, you have to use. That is the preferred command for running PSConfig in any SharePoint Server.

    Below article for reference:

    https://blog.stefan-gossner.com/2015/08/20/why-i-prefer-psconfigui-exe-over-psconfig-exe/

    Thanks & Regards,


    sharath aluri



    Friday, August 9, 2019 3:20 AM
  • Thanks, My last question is the order installation and running the psconfig at the end.

    I have read lots place to start with App server => Search => DS =>Front-End.

    The reason is Central Admin installed in the App server


    Abenet

    Friday, August 9, 2019 3:29 AM
  • What about Distributed Cache? Do I need to disable it.

    Abenet

    Friday, August 9, 2019 3:36 AM
  • If you are Configuring SP2016 then you don't have to worry about starting the Services on which Server there are minroles in place for SP 2016 to taken care of what services to be running on which SharePoint Server 2016.

    If you have 2 Servers, I would say Application with Search in one Server and Front-end with Distributed Cache in another Server.

    PSConfig Should always better to run in Application with Central Admin Server First next Web Front End Server.

    Below article for your reference:

    https://docs.microsoft.com/en-us/sharepoint/administration/description-of-minrole-and-associated-services-in-sharepoint-server-2016

    Thanks & Regards,


    sharath aluri



    Friday, August 9, 2019 3:50 AM
  • Hi, Abenet,

    How is everything going? Is there any update about your work?

    Best Regards

    Jerry


    Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    SharePoint Server 2019 has been released, you can click here to download it.
    Click here to learn new features. Visit the dedicated forum to share, explore and talk to experts about SharePoint Server 2019.

    Monday, August 12, 2019 8:49 AM