internet explorer dynamic collection

[jdurlewanger]

I created a collection to dynamically add resources.

here is the query language:

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System inner join SMS_G_System_SoftwareProduct on SMS_G_System_SoftwareProduct.ResourceId = SMS_R_System.ResourceId where SMS_G_System_SoftwareProduct.ProductName = "Internet Explorer 8"

 

Some resources get added but not what I'm expecting. I am using this group membership to apply internet explorer updates. Is there a way I can force systems to check against the query and add to the group?

 

Thanks,

 

Justin

[GarthMJ]

Which of these Classification have you enabled? http://technet.microsoft.com/en-ca/library/bb633011.aspx

[jdurlewanger]

security updates, critical updates and updates.

[GarthMJ]

I would enable classification all but drivers, this should give you all the IE updates. So that you can deploy IE updates just as any other SU.

[jdurlewanger]

This wont conflict with any software or OS deployment?

[GarthMJ]

It will cause no problems, All that it does is tell clients to scan for each classification of SU. You them must tell CM07/CM12 to deploy those SU to PCs. So unless you tell it to deploy them nothing will happen.

[jdurlewanger]

Thanks for all the information. I was able to successfully push the IE updates using the software updates option. I did come across 1 problem. One of our remote sites gets the list of updates for IE but they get stuck at downloading and can never actually download the update. It just hangs. Does not error out or anything.

Do I need to set a windows update role for the distribution point? I've also discovered that they havent been getting any windows updates as well.

[GarthMJ]

Stupid question but has the content been sent to that DP yet?

[jdurlewanger]

after checking I see the status as install pending. it has previous revisions though.

[GarthMJ]

So until the content is out there, nothing will install. I would look at why content is not making it out to your DP.

[jdurlewanger]

I'm not seeing any ports blocked and the service account has permissions to the folder. Is there a log I can look at that will help me isolate this issue?