私のイントラネットのSharePointにパッチを適用する必要がありますか？

Question

SharePoint Patchingは煩わしさで、テストと展開に時間がかかります。

私のSharePointはイントラネットサイトです（私の組織の敷地内）。

IT仲間の仲間たちは私に主要なSPSだけをパッチして、一般的な慣習は何ですか？

編集： 私の主な懸念の1つはセキュリティパッチです。

Answer 1

Microsoft's "Official" stance is exactly that - only apply the most recent service pack to the farm. You are only supposed to apply the Cumulative Updates if there are fixes that you need in that update.

In practice however, it is often useful to apply the most recent CU to a farm every 6-8 months as there are hundreds of small fixes in each CU and chances are pretty good that your user base is hitting their heads against some of them. They might not be reporting it, but they probably are getting frustrated by it.

Answer 2

You could consider a server security product that includes virtual patching (aka vulnerability shielding). Some of the AV products have this as an option.