Unity Patches

[NAVIN PARWAL]

Folks,

We have a unity server that we have not applied any patches to in over an year, now i have been assigned the task to bring it up to speed with patches. Could someone give me a good summart of what i need to do, Also i am worried about the latest security updates from microsoft , where do i get them.

Unity doc says that i should get the following from microsoft site and install them:

•Microsoft Windows 2000 Server Service Pack 4

•Microsoft SQL Server 2000 Service Pack 4

•Microsoft MSDE 2000 Service Pack 4

•Microsoft Exchange Server 2003 Service Pack 2

what should i do in addition to this, how do i know if i am running MSDE or SQL on the unity server and what SP level i am on?

Thanks

[Brandon Buffin · Accepted solution]

Take a look at the following document. It will tell you how to determine MSDE/SQL and the current SP level. Also, make sure that the SP level on your Exchange server matches the SP level of the Exchange tools on the Unity server.

http://www.cisco.com/en/US/products/sw/voicesw/ps556/products_tech_note09186a008014f8e8.shtml

Hope this helps. If so, please rate the post.

Brandon

[Hin Lee]

Here is the list of updated that you had mentioned. Recommended Service Packs for Cisco Unity

http://www.cisco.com/univercd/cc/td/doc/product/voice/c_unity/cmptblty/msupdate.htm#wp60952

windows - the command is winver

sql or msde - run the following query - select @@Version. If you are running sp3a, then the output will show 8.00.760

Exchange - open exchsrvr\bin folder and look for

EXMGMT.EXE and right click on it. Select Properties, then select the Version tab. Under comments, you will see the service pack installed for exchange.

In addition to the the service pack, please look at Support Policy for Windows Automatic Update http://www.cisco.com/en/US/products/sw/voicesw/ps2237/products_device_support_table09186a0080531aab.html#wp64185

[lindborg]

Just as a side note, GUSI (Gather Unity System Info) will kick all this information out in a nice readable text file if you don't want to go digging around for each piece. You can always get the latest version on its home page here:

http://www.ciscounitytools.com/App_GatherUnitySystemInfo.htm

[NAVIN PARWAL]

Folks,

Many thanks for your answers, i still have 1 doubt. That is:

After i install the following:

•Microsoft Windows 2000 Server Service Pack 4

•Microsoft SQL Server 2000 Service Pack 4

•Microsoft MSDE 2000 Service Pack 4

•Microsoft Exchange Server 2003 Service Pack 2

Should i go to

http://www.cisco.com/cgibin/tablebuild.pl/unity_msft_updates

Page and download add on's for OS and Exchange?

What about the security patches after win2k service pack 4? where do i get those for unity, specially the ones that were release 2 weeks ago.

[Ginger Dillon]

Hi -

There are several options you can do on the Unity server that are supported by Cisco - make sure you do not configure automatic updates on the Unity server because they do not discern between hotfix applies (which can usually be updated on the Unity server immediately after Microsoft releases them) and Service Packs (which are typically supported within 60 days of Microsoft release).

1. Windows Update - go to this site http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us

Select Custom, and uncheck any yet-supported service packs.

2. Install the Microsoft Security Baseline Analyzer reporting tool on the Unity server - http://www.microsoft.com/technet/security/tools/mbsa2/default.mspx

Basically you are going to go to Microsoft.com for security updates. As a caveat, I ALWAYS apply any hotfix in a test environment first and break the mirror set of the server before applying in production. You need to read any hotfix release notes, as applicable, before applying to understand what is being updated on the server. I review each one and do NOT apply any hotfix that updates software that does not run on the Unity server, i.e. no Office updates because the hotfix can install software that is not supported. If I ever have any questions regarding supported software or hotfix, I check with Cisco TAC and the forum here to make sure I am in compliance.

Ginger