Static IP issues with latest 2008 R2 Patch Tuesday and VMs (Be aware!)

[googlemad]

Running Server 2008 R2 VMs? Hope you have a record of your static IP addresses if you use them!

 

https://www.theregister.co.uk/2018/03/14/microsoft_secures_the_servers_of_the_world/

 

Affecting us like mad at the moment!

[Katy]

This caught me out this morning, luckily we only have one 2008R2 left (which we can't upgrade without paying a fortune to get a new licence key for Ringdale FollowMe as it's tied to a "hardware ID" which changes if you alter anything, and in-place upgrade to 2012R2 fails)

[gshaw]

Are all your affected VMs using the VMXNET3 adapter type?

[Norphy]

This has caught me out this morning as well. One of our SIMS servers has a VMXNET NIC and is running 2008 R2. It now has a DHCP assigned address and unfortunately I have no idea what static address it had before.

 

Oh, for some proper IP Address management

Edited March 15, 2018 by Norphy

[southhamster]

This has caught me out this morning as well. One of our SIMS servers has a VMXNET NIC and is running 2008 R2.

 

Oh, for some proper IP Address management

Oh for some Microsoft quality control!

[Norphy]

Oh for some Microsoft quality control!

 

That too but it's made worse when your internal procedures aren't up to scratch.

[free780]

Microsoft just drop some nodes in the cluster. They are running server 1709 for everything probably.

[gshaw]

That too but it's made worse when your internal procedures aren't up to scratch.

This is interesting as I saw comments on The Register slating various practices from using static IP addresses on servers (really?) up to the usual "should have a test network"

 

Sad reality is many people don't have the resource (spare servers to make a like for like copy of live environment) no time to rigourously test these patches.

 

With the security landscape as it is now quick patching *seems* to trump heavy testing for non-critical networks so what can you do?

 

For every person that says delay patching you'll get another saying that in itself is poor practice.

[free780]

Best idea would be to have an server of each OS Version in your first ring. Then once validated update the next ring.

[gshaw]

Best idea would be to have an server of each OS Version in your first ring. Then once validated update the next ring.

OK in theory but say the next bug only affects IIS and your test server doesn't have it. Then you need one of each OS and role. Before you know it you have a job on its own going through all the different permutations to cover the bases.

[free780]

Maybe it's a MS conspiracy to move everything to Azure.

[Hotglue]

A big problem is not knowing there's a problem early enough. I had already set out on the road before I got the call.

I'm looking for a system that can email my phone if a server goes down or off the grid.

[TwistedHelixis]

I'm looking for a system that can email my phone if a server goes down or off the grid.

 

This is amazing and cheap for what it does. I have it on all my primary school servers

https://www.pulseway.com/it-management-software

[Hotglue]

Thanks TwistedHelixis

 

I downloaded and will install it today on a test server.

I may try Server Up-Time Monitoring it looks interesting.

[TwistedHelixis]

I may try Server Up-Time Monitoring it looks interesting.

 

TBH I am not paying much more for Pulseway. Main thing I use Pulseway for is to email after each backup has run and remote access.

[thatley]

TBH I am not paying much more for Pulseway. Main thing I use Pulseway for is to email after each backup has run and remote access.

 

Hi,

 

I know this is an old thread, but I'm just going through a trial with Pulseway now and hoping to replace the ever price increasing Centrastage! From what I've seen already, it's a fantastic, powerful bit of software and really impressed.

 

Only trouble so far is that Remote Desktop isn't working. They say it's because port 443 is not open outbound from my end, which i'm pursuing now with the LGFL (but I'm sure it's open!)

 

Did you have any issues with your setup?

 

Thanks

[TwistedHelixis]

No issues getting it to work and its been fine for the ouple of years I have had it installed.. Can you assign a different port?

[thatley]

Thanks.

 

I've just had a reply back from Atomwide about the ports and 443 is open. They suggest URL's may need to be allowed, but I'm not sure that would just block the Remote Desktop aspect.

 

My trial started yesterday which is the brand new released version - i wonder if it's anything to do with that.

[TwistedHelixis]

I would send Pulseway a message or post on their forums, its probably something simple.

[thatley]

Going to do that now.

 

Thanks for your help.

 

PS, how do you like to product?

[TwistedHelixis]

I really like it and have started to use it to monitor our virtual machines and also deploy our server updates. There are so many options with it, although I have most turned off at the moment.

 

Handy hint, not sure if this is still applicable but I disabled hard drive monitoring (think its on the first page of settings) as it can cause an issue on servers.