Soll ich meinen Intranet SharePoint patchen?

Question

SharePoint Patching ist ein Ärgern und dauert viel Zeit, um zu testen und bereitzustellen,

My SharePoint ist eine Intranet-Site (in den Räumlichkeiten meiner Organisation).

Einige Fellow-IT-Admins beraten mich, nur wichtige SPS aufzulegen, was ist die übliche Praxis?

edit: Einer meiner wichtigsten Bedenken ist Sicherheits-Patches.

Answer 1

Microsoft's "Official" stance is exactly that - only apply the most recent service pack to the farm. You are only supposed to apply the Cumulative Updates if there are fixes that you need in that update.

In practice however, it is often useful to apply the most recent CU to a farm every 6-8 months as there are hundreds of small fixes in each CU and chances are pretty good that your user base is hitting their heads against some of them. They might not be reporting it, but they probably are getting frustrated by it.

Answer 2

You could consider a server security product that includes virtual patching (aka vulnerability shielding). Some of the AV products have this as an option.