Please help me with the best practices / steps to follow while installing windows critical updates on SharePoint 2013 farm as part of organization policy (OS - windows server 2012)
If you have windows update enabled , and the windows update has been installed on all SharePoint servers within the farm based on your organization policy ,
The only thing you need to plan is to run the
Sharepoint configuration wizard on all Sharepoint server started from the application server that holds the Central administration , to apply the Security fixes that included at this M/W update .
Note : SharePoint 2013 allow to continue execution without PSCONFIG after installing fixes.so you can schedule running configuration wizard after M/W update is finished.