using System Center 2012 Configuration Manager - Part 9. Deploying Monthly Updates

[anyweb]

Silly question, and maybe I missed a post.. In SCCM 2007 we had our monthly patch collections structured in groups, ie.

 

Group 4

- Office 1

- Office 2

Group 3

- Office 3

- Office 4

Group 4

- Office 5

 

And we would push our monthly updates to group 4, group 3 etc.

 

In Sccm 2012 we are now unable to create sub collections. Does that now mean that if we want to accompliush the same task we need to break out each office into individual collections?

 

pretty much, you could create folders for the Groups above and then have collections for those corresponding groups contained within.

[Bill Sweatt]

This tutorial seemed to skip right over the "Download Location" settings. While most of the topics that have come up in the many replies to this tutorial have referenced best practices, I think I have a more basic problem.

 

My SCCM servers do not have direct Internet access.

 

I have managed to configure the SUP to sync the updates catalog with an upstream WSUS server. However, when configuring deployments, I am requested to provide the location from which SCCM can actually download those updates. Without direct Internet access, I can't download those updates from Microsoft. I am left with specifying a network share. So where can I point the deployment? Is there a folder on the upstream WSUS server that contains the installable update files? (\WSUS\WSUSContent?) Can I just share that folder and point SCCM to it?

 

Thanks.

[keywan]

Hi anyweb,

 

First of all great tutorial many thanks for your hard work. I created first one named ADR: Window 7 monthley update and follow your descrition until:

 

After running the rule, verify that the Deployment Package is indeed created and when done, right click on the ADR again, and choose Disable.( here I choose create a new deployment package)

 

After runing the ADR:Window 7 monthley update I saw the deploment package is created I disabled the ADR Window 7 monthley update and recreate again a new ADR named: ADR:windows 7 monthley updated and follow exact the description choose this time the Select Deployment Package and follow the wizard.

 

My question is:

 

Which ADR should I run for deploy my updates to the Windows client? The ADR:Window 7 monthley update still is disabled and ADR:windows 7 monthley updated is enabled.

 

For testing I did run (manalley) The ADR:Window 7 monthley update( it is still disabled) and I open my Windows Explorer at this point and browse to the location of my Windows 7 Updates package source location and saw alle updated files. If I go the Software Library workspace, select Software Updates and expand Deployment Packages, select my Windows 7 Updates deployment Package and click on Content Status.

I can see that everthing is OK. But my client computer does not receive any windows update. I cannot see any new software update in the Software center.

 

What do I here wrong?

 

Thanks for help.

 

Here you see my compliance information revealed at this point is listed as Unknown (71).

[anyweb]

if you followed the guide exactly then you'll have two ADRs, the first one is disabled (so don't use it) and the second one is enabled (use it..)

[Harmen1966]

Hi.

 

I’ve followed the tutorial form Niall to implement WSUS with SCCM 2012 SP1 with ADR’s that worked fine, but we have also an old WSUS environment and there are some difference between them with the updates.

I took the same setting from the old WSUS environment (download critical and security updates) and make sure that the ADR download the same but clients with the old WSUS environment getting much more updates installed then clients with SCCM 2012 SP1.

The updates are in the list but not downloaded and not deployed to the workstations with the SCCM 2012 client. I don’t know where it went wrong so maybe someone could give me a hint for this.

 

Thanks.

Harmen

[nectormjr]

Hi Guys,

 

Need your help, when I check my WSUS Server it's already downloaded the necessary updates but when I check my SCCM console and run Synchronize Software Updates, it won't sync the updates with my WSUS.

My setup is my primary SCCM server is my WSUS too.

WCM.log

[Peter33]

When I tried to execute the script I got the following error:

 

File C:\temp\CreateFoldersAndCollections.ps1 cannot be loaded. The file C:\temp\CreateFoldersAndCollections.ps1 is not digitally signed. The script will not execute on the system. Please see "get-help about_signing" for more details..

 

Any suggestions?

 

Set the execution policy to remotesigned. If you downloaded the file directly to c:\temp... copy this file again locally to another file.

[cinrazvan]

Greeting ,

 

First of all great tutorial

 

 

I have 2 questions :

 

a) I've created an ADR for Windows 8 starting from 9.7.2013. Run it manually today and then checked for Deployment package

Deployment package is there and ADR had no errors

 

My question: why does my Windows 8 deployment folder in c:\Sources \ Windows 8 is empty ? My Endpoint ADR folder from the same location is populated with updates .

My Endpoint ADR is set to run every morning from 9 AM so files from ENDPOINT folder have the date 9:05 AM

Why the same thing is not happening to my Windows 8 folder? Do I have to wait for the ADR to run on July 9 ?

 

I don't have any Windows 8 SUG , End Point SUG is there since 9:04 AM this morning.

 

 

I am in the dark , please advice .

 

 

Thanks guys

[Soggy]

First of all, thanks for the awesome guides.

 

How does one change the frequency of the update deployment enforcement messages, from looking at technet it suggests that this should fall under state messaging which is set to 15 minutes but doesn't seem to be updating often

For the purposes of SCIENCE I upped the frequency of Update scanning and revaluation to 10 minutes but that didn't seem to have any effect.

 

Ideally I'd like this to update regularly 10-15 mins, so someone can baby sit the status of the the deployment to a large set of servers whilst keeping an eye on monitoring as well.

 

 

EDIT: Right, answered my own question.

"Although you can specify an interval of less than 1 day, Configuration Manager will automatically default to 1 day."

Which is a bit subpar for the purposes I wanted - ie monitoring deployment on servers rather than "whenever" of desktops.

[prabha giduthuri]

Hi All,

 

Need your help Pls

 

We have deployed patches to all our client machines



But in some machines WUAHandler.log, Some of the updates showing missing



Pls find the below log:



Updates missing showing in WUAHandlerlog



Why this happened? What might the problem? need the resolution Pls

==================================

1.Update (Missing): Security Update for Office Communicator 2007 R2 (KB2827753) (08a56a58-ec36-4b1d-a69d-9c94e51b2ba4, 201) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



2. Update (Missing): Update for Windows 7 (KB2798162) (14c9b803-8f12-45a5-8f00-936b6ec937ee, 202) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)





3. Update (Missing): Security Update for Internet Explorer 8 for Windows 7 (KB2847204) (26e2b234-50cb-4cf1-a87b-5f091fdf93ea, 200) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



4. Update (Missing): Update for Microsoft Office Outlook 2007 Junk Email Filter (KB2817359) (4efe33db-fa59-420c-8728-d4c3e2dd9239, 200) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



5. Update (Missing): Security Update for Microsoft .NET Framework 4 on XP, Server 2003, Vista, Windows 7, Server 2008 x86 (KB2804576) (8e205f7f-e982-43ea-a762-4ec4eb4f2796, 201) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



6. Update (Missing): Cumulative Security Update for Internet Explorer 8 for Windows 7 (KB2829530) (9c0e9b52-effa-435f-8f62-78d38658b470, 201) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



7. Update (Missing): Update for Windows 7 (KB2820331) (cc518183-545b-46f6-ae19-65113924b9f3, 200) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



8. Update (Missing): Security Update for Microsoft Office Publisher 2007 (KB2597971) (d4ba1755-527d-4bb5-8a4e-b82a1b0d89d8, 201) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



9. Update (Missing): Security Update for Windows 7 (KB2829361) (e622baa4-805c-4001-a709-18fdc70ceec1, 202) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



10. Update (Missing): Security Update for Windows 7 (KB2830290) (eaf44246-10d1-425e-b195-2fe128fecdda, 202) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



11. Update (Missing): Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 SP1 x86 (KB2804579) (f70772db-7eec-49fb-aa3a-589c67c1637e, 201) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



12. Update (Missing): Update for Root Certificates for Windows 7 [May 2013] (KB931125) (f9b94020-21f4-460b-ac05-865482b7e0d1, 200) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)



13. Update (Missing): Update for Windows 7 (KB2813956) (fb1a29a6-74a7-4abf-8645-27fc1d203b84, 200) WUAHandler 7/11/2013 10:33:48 PM 4872 (0x1308)
Async installation of updates started. WUAHandler 7/11/2013 10:33:49 PM 4872 (0x1308)



Please help... Give the resolution to overcome this missing updates and get them installed in client machines

 

We are not achieving 96% of SLA compliance. Pls help