Windows Updates not installed upon deployment

[Biscuitgod]

I'm very new to SCCM. This environment was setup well before I took this job over and I'm not sure on some of it's settings, so there may be a bunch of underlying issues causing this.

 

My problem is:

When I push out an image, I made sure to 'Install Software Updates' in my TS. I see this flash across the screen while in the act of imaging, but it flys by so fast (nothing is getting installed). My question is how do i get updates installed during the imaging process?

 

My setup:

I've done a lot of reading about this hoping i could figure out an 'easy' fix to my issue, but no go. I did read that WSUS OR SCCM could handle updates but not both. In our environment, WSUS was setup well before SCCM was, so that is what we use. Now that SCCM came along, a previous worker attempted to setup updates through it (from what i could tell, but i'm not 100% on that). I think the general consensus around here is to keep using WSUS. How can I make everything work together to push out updates upon imaging?

 

 

Another question... Would it be best to let SCCM handle all updates? i think the worries right now are, a few people already know the procedure to approve and test updates, I think they're worried about messing that process up. Is this something that can still be done? Can I still have test groups and everything? (probably a dumb question, but i have to cover my bases).

 

Thanks

[Peter van der Woude]

To deploy updates from the Task Sequence with the standard Instal Software Updates -step, you need to integrate WSUS with SCCM. Then you can advertise the Software Updates to the collection that includes you machine.

[anyweb]

to add to peters answer, create a deployment management task in the software updates section of ConfigMgr, and point that task collection tab to the collection that your computer is in during deployment, typically the Unknown Computer collection

[Biscuitgod]

To deploy updates from the Task Sequence with the standard Instal Software Updates -step

 

This is already in the TS. It's just failing to push out any updates....

 

you need to integrate WSUS with SCCM.

 

Not sure how to do this.... Maybe this is my problem, but i'll need to know how to verify if this has already been done

 

Then you can advertise the Software Updates to the collection that includes you machine.

 

Do you have to adververtise the software updates to the collection BEFORE the TS will kick off properly to that machine?? Seems a bit redundant to me...

[anyweb]

this post shows you how to set it up (wsus/sup/sccm),

the collection that you need to advertise the deployment management task to is the Unknown Computers collection, think about it

[Biscuitgod]

this post shows you how to set it up (wsus/sup/sccm),

the collection that you need to advertise the deployment management task to is the Unknown Computers collection, think about it

 

 

I think all those steps have been done... i've double-checked my setup and it looks damn-near identical to what's in that article...

 

We rarely will use the unknown computers collection... Any machines that are on our network will be imaged by us, so I'm curious about this right now for testing purposes only. Again, my problem is that the Install Updates section in my TS isn't working, as i watch a machine image, it simply flashes by the screen and doesn't install any of my updates. This is why i asked if i need to advertise the deployment management task to my TEST collection? Didn't know if it would get these updates to work or not within the TS.

 

ALSO - One of the first steps of your article is to install WSUS but not configure it. Our environment was setup to use WSUS long before SCCM was utilized, so this step isn't accurate on our setup. We use WSUS for all software updates. The article you sent me is telling me to set it up a different way, but i cannot do this.

 

 

How can i get this to work?? All I want is for the TS to install the updates while deploying my image.. That's it. All other software updates will be handled by WSUS after the fact, I just want it up-to-date as of imaging. Is this possible?

 

Thanks

[lratue]

I know what u mean. I wanted to do exactly the same thing like you. But I thnik it is not possible to do it this way....

 

Please tell me when I'm wrong.

[anyweb]

ok then, try and create two deployment management tasks

one pointing at the Unknown Computers Collection, and the other pointing at your Deployment Collection,

 

that should cover your scenario

[wmmayms]

Here is a little bit diffrent approach.

http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/06c5ac38-1726-4344-9022-71c1eeef6060

 

It might suit you if you which to continue handling the patches through wsus