Configuring Software Update Point within SCCM

[anyweb]

This guide assumes you have SCCM 2007 setup as described here. This guide was based upon a document entitled Patch Management directions for SCCM by Christopher Stauffer which you can find here.

 

Please note that this guide is designed to help you get a working SUP in SCCM in a LAB Environment as quickly as possible. This guide is provided as is, if you find any errors please report them in the forums.

 

In a production environment please consult Technet for best practise, see below links:

 

Superflow:

 

Software Update Deployment SuperFlow

 

 

About Software Update Point:

 

About Software Update Point

 

Planning:

 

Planning for Software Updates Client Settings

 

Configuration:

 

Configuring Software Updates

How to Configure the Software Updates Client Agent

How to Create and Configure an Active Internet-Based Software Update Point

 

Best Practices:

 

Configuring Configuration Manager Sites for Best Performance

Checklist for Security Best Practices

Best Practices for Central and Primary Site Hardware and Software Configuration

Best Practices for Operating System Deployment

 

Software Update Point process Flowcharts:

 

Software Updates Synchronization Process Flowchart

Software Update Deployment Process Flowchart

Deployment Package Process Flowchart

 

Related:

 

How to obtain the latest version of the Windows Update Agent

 

 

1. Install WSUS

 

Install WSUS but do not configure it. Once done, make sure the Software Update Point Role is installed on the SCCM Server.

 

 

Once you've added the Software Update Point role, verify that it is installed by checking the SUPSetup.log, it should have a line which reads Installation was successful

 

2. Create some Search Folders

 

In the Software Updates section, right click on Search Folders and choose New Folder,

 

 

give the new folder a name like Enterprise Searches (we willl store our yearly searches here)

 

 

Right click on our new folder and choose New Search Folder,

 

 

select the following options from step 1 (in the screenshot),

 

BulletinID, Expired and Superseded

 

 

in step 2, Set the BulleinID to MS plus the last two digits of the year eg: MS08

Set Expired to No

Set Superseded to No

 

Make sure that Search All folders under this feature is selected and give the search a name, eg: 2008 patches

 

 

Now that you know how to make a Search Folder, let's make one for Monthly searches, so right click on Enterprise Patches and choose New Search Folder

 

Fill it in as follows

 

 

and now make one for Windows Server 2008, we do this by adding Product as a search criteria and typing in the search phrase to look for, naturally you can customise it to suit your needs.

 

[KuifJe]

Good to see the guide is still functional even after all the R2 versions (2008 and SCCM) and SP2 release.

 

Just one quick question about setting up software updates...

 

 

This says I have to redownload the updates from the internet when creating the update deployment, wouldn't it be wiser to just use the files downloaded by the initial synchronization of the server?

[Kingskawn]

When you want RDP 6.0 to be installed on all clients you just have to pick it out of the updates, choose 'Deploy Software Updates' and it will be added into 'Deployment Management' where you can set on what collection it must be distributed.

 

Am I right?

There mustn't necessary be a 'Deployment Package' to deploy an update, isn't it?

[Peter van der Woude]

A Software Update always has to be in an Update Package

[Kingskawn]

A Software Update always has to be in an Update Package

But if I look in all my updates, I choose 1 update and do 'Deploy Software Updates', it will create a new install for me where I also choose the template and then I've a new line in 'Deployment Management' but nothing in 'Deployment Packages'

How come?

[Peter van der Woude]

You don't have to create a new Update Package everytime. With Deployment Packages it lists all your Update Packages, so if you selected an excisting Update Package then you won't see a new line with Deployment Packages.

[sccm_freak]

anyweb

if i want to create a search folder for microsoft updates in 2010 only what to do

thanks

[anyweb]

Create a search folder with the following Criteria

 

Bulletin ID = MS10

Expired = No

Superseded = No

 

Place a checkmark in Search all folders under this feature=yes...

 

That will show all Security Updates for Microsoft Products in 2010 from the products you selected in the softwaer update point Component Properties product menu.

 

To narrow it down, add Product to your search folder criteria

[sccm_freak]

thanks man

[sccm_freak]

@anyweb

isnt there a way to fasten the deployment for the software updates , im waiting since 2 hours and its still showing me the

![LOG[Added Update Source ({5F657886-4804-49DC-8736-D99BC2BE5F0D}) of content type: 2]LOG]!><time="13:00:40.949+-60" date="11-30-2008" component="WUAHandler" context="" type="1" thread="2184" file="sourcemanager.cpp:1372">

<![LOG[Async searching of updates using WUAgent started.]LOG]!><time="13:00:40.980+-60" date="11-30-2008" component="WUAHandler" context="" type="1" thread="2184" file="cwuahandler.cpp:587">

<![LOG[Async searching completed.]LOG]!><time="13:00:55.280+-60" date="11-30-2008" component="WUAHandler" context="" type="1" thread="2296" file="cwuahandler.cpp:2099">

<![LOG[successfully completed scan.]LOG]!><time="13:00:55.435+-60" date="11-30-2008" component="WUAHandler" context="" type="1" thread="2976" file="cwuahandler.cpp:3261">

 

PS : forget about the timing here as i pulled it from your attached file hehe , the point is its stuck on successfully completed scan

 

any issues ?

 

thanks

[joyoyo]

Hi,

I tried to select "Windows server 2008" product like you but i can not found it. I see i need to synchonise first but, when when I click on "Update Repository", i haven't got "Run Synchronisation". Can you help please.

 

Thank for all.