1. 程式人生 > >關於簡化安全更新後的說明

關於簡化安全更新後的說明

從2016年10月開始,作業系統安全更新發布模式有所變化(請參考之前博文)。原來針對每個受影響的作業系統元件,往往會有單獨的安全更新修復。從10月開始,這些針對作業系統不同元件的修復,均集中在一個安裝包中完成。

對於企業使用者,更新管理系統中會出現Security Only Quality Update 和Security Monthly Quality Rollup這兩大類安全更新。由於Security Monthly Quality Rollup 本身就涵蓋了當月釋出的Security Only Quality Update,細心的使用者會發現從11月份開始,Security Only Quality Update被當月的Security Monthly Quality Rollup 所取代。這個取代關係是產品組綜合評定下來確定的。

本月5日(太平洋時間),產品組聽取多方反饋後釋出了最新確認資訊。從12月開始,當月的Security Only Quality Update將不再被當月的Security Monthly Quality Rollup 所取代。屆時對於11月份的安全更新,也會相應修改元資料(Metadata)。使用Configuration Manager 2007的使用者將無需各種複雜變通方法來部署Security Only Quality Update。詳細資訊您可以參考產品組博文https://blogs.technet.microsoft.com/windowsitpro/2016/10/07/more-on-windows-7-and-windows-8-1-servicing-changes/

引文如下:

UPDATE: 12/5/2016: In November 2016, the Security Monthly Quality Rollups were released as superseding the Security Only Quality updates. This resulted in an impact to customers deploying the Security Only Quality updates, using tools that cannot easily deploy superseded updates, such as System Center Configuration Manager 2007. Based on customer feedback, this supersedence has been changed in December 2016. Please review the updates below if this impacts your deployment scenarios.”……

UPDATED 12/5/2016: Starting in December 2016, monthly rollups will not supersede security only updates. The November 2016 monthly rollup will also be updated to not supersede security only updates. Installing the latest monthly rollup will ensure the PC is compliant for all security updates released in the new servicing model.

Note that installing just the security only updates may show the monthly rollup as Missing in compliance tools or reports, as the monthly rollup is also a “Security update”. If the security only updates are installed each month, the PC will have all the necessary security fixes released in the new servicing model.

As long as you install one or the other (security only update or monthly rollup), the PCs will have the needed security fixes released that month.”

最後需要提請注意的是,推薦您儘早安排針對Security Monthly Quality Rollup 的測試。因為它除了修復安全問題,還提供了系統穩定性的重要修復。有了它,您的系統才能既穩定又安全地執行,您今後的合規檢查校驗也將更為容易。