ndaniels
Posts: 177
Score: 29 Joined: 2/24/2006 From: The Republic of Elbonia Status: offline
|
My 2 cents... From a home computer perspective, I'm rapidly reaching the point of applying the "if it ain't broke don't fix it" logic to all non-critical patches. (See the thread "Windows Vista Photos Screen Saver Performance" - http://www.myitforum.com/forums/Windows_Vista_Photos_Screen_Saver_Performance/m_179270/tm.htm ) I really wish that I hadn't recently applied the update for the "Intel Corporation - Display - Intel 82945G Express Chipset Family" that came down as an optional MS update. From a corporate perspective, a big consideration is application compatibility testing. If you have 100, 1,000, 10,000, or, in your case, 55,000 workstations you are looking to deploy updates to, and you're going to be doing it via a deployment package (like SMS), be ready for support calls--even if you have thoroughly tested. ("Hope for the best but prepare for the worst.") When I was still working as a PC Technician, my personal stance (right or wrong) was: Leave device drivers untouched on workstations unless (a) there is a known vulnerability or (b) the user is having problems. Otherwise, you're looking at spending a lot of time (that you probably don't have) testing device driver compatibility with all of the applications you use. From the user's perspective, the driver change will most likely be transparent to them--unless it blows up. Now you've generated "bad press" for yourself over something that the end user sees as a zero benefit to them. If I installed a new application on a workstation for a user and that application was having problems with a specific device, I would try updating the device driver to see if it fixed the problem. Other than that, I typically did not go "looking for trouble" by updating device drivers on my own accord. If you do decide to roll out device driver updates and have the option of doing so in groups of computers, rather than all at one shot, I'd highly recommend that approach. If a push gives you problems, it's easier to deal with a problem on, say, 100 or even 1,000 computers than it is all 55K. If you have off-site locations, bear in mind any bandwidth considerations -- can the connection to office X handle at 50mb device driver going to 100 computers at that site? etc. Others may disagree with my logic and that's okay. I'm probably more of a pessimist when it comes to this kind of stuff, anyway. I, too, would be interested in hearing other people's comments.
< Message edited by ndaniels -- 5/21/2008 2:43:08 PM >
|