Device Collection with computers that have not run Windows Updates in more than 2 months

[Didier Caamano]

Hello everyone, 

I recently started to manage a SCCM environment and I am implementing Windows Updates using SCCM.  We do not have all server at the same patch level.  I currently have the following device collection to apply monthly updates on devices that are up to date:

Windows Servers – Update Manual

Windows Servers – Update Monthly

Windows Servers – Update Test

The aforementioned collections are for devices that are up to date.  As I said at the beginning, not all my devices are up to date nor are they at the same patch level.  I wonder if there is a way that I can create a device collection "Windows Servers - Updates 2008 Catchup", and populate it with devices (running Windows Server 2008 or 2008 R2 in this example) that have not had windows updates installed in the last 3 months or older?

The idea is to easily identify which devices are up to date with Windows Updates and which devices are not, and slowly bring them all to the same, and up to date, patch level.

 

Any help is appreciated.

Thanks,

[GarthMJ]

I wouldn't bother with a collection for this. instead, I would just deploy these SU just as you would any other SU. 

I would use this to determine what SU to deploy. 

https://www.enhansoft.com/blog/how-to-determine-what-software-updates-are-required-within-configuration-manager