I always let the built-in windows update tool download the updates, but I manually press the install button so I can stop the Commvault services first and this way you can prevent automatic reboots.
We would always put our Commvault servers into a GPO that automatically deployed the patches to the server, but we then would manually install as @Jos Meijer suggested. We would then deploy the patches manually, reboot and generally perform other tasks at the same time (such as DB Maintenance on the CSDB or Commvault MR’s).
We’d also patch Windows MediaAgents the same way so we could ensure that the SIDB processes would be stopped cleanly.
We’d also get any change windows approved for business hours when the backup systems were generally quieter.
We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.