Configuring Software Update Point within SCCM

[anyweb]

This guide assumes you have SCCM 2007 setup as described here. This guide was based upon a document entitled Patch Management directions for SCCM by Christopher Stauffer which you can find here.

 

Please note that this guide is designed to help you get a working SUP in SCCM in a LAB Environment as quickly as possible. This guide is provided as is, if you find any errors please report them in the forums.

 

In a production environment please consult Technet for best practise, see below links:

 

Superflow:

 

Software Update Deployment SuperFlow

 

 

About Software Update Point:

 

About Software Update Point

 

Planning:

 

Planning for Software Updates Client Settings

 

Configuration:

 

Configuring Software Updates

How to Configure the Software Updates Client Agent

How to Create and Configure an Active Internet-Based Software Update Point

 

Best Practices:

 

Configuring Configuration Manager Sites for Best Performance

Checklist for Security Best Practices

Best Practices for Central and Primary Site Hardware and Software Configuration

Best Practices for Operating System Deployment

 

Software Update Point process Flowcharts:

 

Software Updates Synchronization Process Flowchart

Software Update Deployment Process Flowchart

Deployment Package Process Flowchart

 

Related:

 

How to obtain the latest version of the Windows Update Agent

 

 

1. Install WSUS

 

Install WSUS but do not configure it. Once done, make sure the Software Update Point Role is installed on the SCCM Server.

 

 

Once you've added the Software Update Point role, verify that it is installed by checking the SUPSetup.log, it should have a line which reads Installation was successful

 

2. Create some Search Folders

 

In the Software Updates section, right click on Search Folders and choose New Folder,

 

 

give the new folder a name like Enterprise Searches (we willl store our yearly searches here)

 

 

Right click on our new folder and choose New Search Folder,

 

 

select the following options from step 1 (in the screenshot),

 

BulletinID, Expired and Superseded

 

 

in step 2, Set the BulleinID to MS plus the last two digits of the year eg: MS08

Set Expired to No

Set Superseded to No

 

Make sure that Search All folders under this feature is selected and give the search a name, eg: 2008 patches

 

 

Now that you know how to make a Search Folder, let's make one for Monthly searches, so right click on Enterprise Patches and choose New Search Folder

 

Fill it in as follows

 

 

and now make one for Windows Server 2008, we do this by adding Product as a search criteria and typing in the search phrase to look for, naturally you can customise it to suit your needs.

 

[Kingskawn]

which update is the installation of IE7? I can't find it under Software Updates on SCCM

[anyweb]

Bulletin ID:

Article ID: 940767

 

Date revised: Tuesday, April 29, 2008

 

 

That's it ^, i found it by searching for Internet Explorer 7 in my All Windows XP updates with the following Search Folder Criteria

 

 

Product Windows XP

Expired No

Superseded No

[Kingskawn]

Can tell me more about the update list?

When I have already made some update lists to a package like;

 

Update List - 12/01/2009 17:02:17

Update List - 25/02/2009 20:05:15

Update List - 04/03/2009 12:15:24

Update List - 11/04/2009 07:28:19

Update List - 07/05/2009 09:28:38

Update List - 16/06/2009 11:37:24

 

Can I say that I delete (right button) the older ones so anything before 16/06/2009 ?

 

Another thing, on which interval are you making an update list? Every wednesday, every week, every month,...?

 

Thanks anyweb!

[anyweb]

it's up to you

 

i just update my deployment packages and deployment management tasks and the change the schedule and thats it

 

do it monthly as thats when the patches come out (second tuesday of the month)

 

[nsilimela]

What to use as description if I want only windows xp updates? I put "Windows XP" for description instead of "Windows Server 2008" in your example.

 

EDIT: If the downloaded updates resides on the wsus server, there is no need to download it again or yes?

I'm referring to this print screen;

 

 

I've got a problem when I want to close my first advertisement. I made a search based on windows xp updates. I selected the ones I need in the list and chose 'Deploy update...' and gave me those errors in the end. This is the print screen;

 

 

 

Hi there Kingskawn,

 

Why are you choosing to download from the internet if you already have an in house WSUS server in your environment ? Shouldn't the updates be on the \WSUScontent folder ?

 

I'm just curious ..

[Kingskawn]

Hi there Kingskawn,

 

Why are you choosing to download from the internet if you already have an in house WSUS server in your environment ? Shouldn't the updates be on the \WSUScontent folder ?

 

I'm just curious ..

 

Yes you're right. Why am I downloading from the internet when I've got the sources on site?

 

I don't know. Maybe I'm gonna change that

[anyweb]

below is a screenshot of Offline Updates (via MDT integration in the Task Sequence)

 

[Kingskawn]

below is a screenshot of Offline Updates (via MDT integration in the Task Sequence)

 

 

Ok, I'll try that. Anyweb, can you tell me what's in your TS named 'Tatoo' and 'Copy logs' please?

[anyweb]

hi kingskawn sorry i just posted that screenshot for another post on technet, it wasnt directed at you.

 

are you software updates working ok or not ?

[Kenny456]

I was walking thru the steps, and I don't seem to have an option to type text for a product, I get check boxes. Server 2008 isn't available as an option? How do I add server 2008 as a product option?