Out of Band updates ADR

[horicj]

Hi,

 

First of all i'd like to thank you for the awesome SCCM 2012 tutorial i found here. It was a great help for setting up our sccm servers.

 

Now i have a small issue with Out of Band patches released by Microsoft outside patch tuesday.

For the regular patches(released on patch tuesday) i have some ADR's which deploy the updates in 3 phases. I don't want to deploy directly to the production machines so the first two phases are like a test run to make sure we won't encounter any problems when applying patches in production.

 

I tried to create a new ADR for any updates that may be released outside the normal patching window, but i wasn't able to filter out the updates so i can remain only with the oob patches. I set the ADR to check for any new updates every week, but when it overlaps with the regular updates it will throw in the deployment package all the updates Microsoft releases each month.

 

Did anyone try to automate this? it would be a lot easier if we could apply these patches automatically instead of updating the deployment packages whenever there is a new oob patch.

 

Thanks

[Peter van der Woude]

The thing with OOB patches is that you don't know when they're coming, which makes it close to impossible to automate. Also, often these patches are released with a very high priority, which makes me want to be on top of it. That means I want to be sure that it happens and when it happens, so no ADR, but download and deploy them myself.

[horicj]

I'm doing it like this now..i was thinking there might be a way to automate this...an ADR would be able to download them automatically(can set it to check daily for any new updates) and the problem would be creating the deployment which would leave out all the other updates excpet the OOB one

[Peter van der Woude]

I would call it an impossible task to create an ADR to filter for an OOB patch. Personally, I wouldn't spent time on automating a task like that. It simply doesn't happen that often that it justice for automation. Like I mentioned before, I also wouldn't even want to automate a task like that. The only way to be in control of an action like that is to be on top of it.