Stagger Windows Updates - IO issues with VMs

we run medium size vm infrastructure - 5 physical machines ~20 vms each server.  performance of systems acceptable during normal operations.  however, when comes doing windows updates, our io huge bottleneck.  not know technical details of our san setup, basically, don't impact systems @ once, can update handful of vms @ once have manually manage.  time consuming task each month.

question ... there way serially roll out updates?  we'd want each physical server have 1 vm being patched @ time.  once 1 vm on physical done, next vm on physical can patched.

note:  not have wsus installed yet, in reading far haven't seen ability.  if not wsus, other methods available?

thanks,
chad

so question ... there way serially roll out updates? we'd want each physical server have 1 vm being patched @ time.  once 1 vm on physical done, next vm on physical can patched.

presumably *servers* being updated interactively logged on administrator, "best practices" answer question patch administrator (or server adminstrator installing patches) not try 20 machines @ same time. so, you're doing -- manually manage updates -- appropriate methodology.

however, assuming you're wanting less optimal, , use scheduled event, then, yeah, default installation event @ 3am across 20 machines going badthing disk i/o. installation time configurable via policy, , solution create appropriate number of unique group policy objects installation windows care use. of course, getting group policy objects assigned 100 machines complicated scenario, might consider using local policy configure desired installation time @ each machine. downside here, though, installation times can scheduled @ top of hour .. there's handful of available daily installation windows can used in manner.

beyond that, may find benefit using third-party product, such eminentware's wsus extension pack, allow discretely schedule installation times one-minute granularity, , build custom installation events targeted @ 1 selected vm on each host.

---

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
principal/cto, onsite technology solutions, houston, texas
microsoft mvp - software distribution (2005-2010)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
blog: http://onsitechsolutions.spaces.live.com

Windows Server  >  WSUS