Hassan Almanasrah

Many thanks for your guidances and support, I cam up with some questions for the part of pushing updates using SCCM 2012 which are below: 1. In your post, Automatic update is enabled using GPO, isn't it better to be disabled? 2. In Some comments on the post, discussion for is it necessary to us GPO of Windows updates for client or not. Can you please provide final decision if the two GPO settings regarding Windows update are necessary or not in the case we use SCCM 2012 for windows updates which integrates for sure WSUS, but not WSUS Explicitly. 3. Why the serach criteria for Windows updates includes Bulletin ID as mandatory, while I can see some KBs in the lab with Bullitin ID, why these updates are neglected ??? 4. Could you please provide post explaining the below points: KB updates statistics: when we click on update circle appears on the right showing (Compliant, Required, Not required, Unknown), What are meanings? How are being evaluated? Evaluation is done for all Assets or the Assets related to the update? Next to Bulletin ID, there are Required, Installed and Percent Compliant columns, how these are laso evaluated and is it accurate. Also, the posts are showing how SUP is installed and configured and how Updates are installed, distributed and deployed, But the Best practice strategy is not provided. What I mean is how often updates being checked, like WSUS every Tuesday?? How the next bunch of updates are deployed?? Where to save the downloaded updates, is it to the first time we download or to create new folder for each group of update What the action will be done, if PC has been re-imaged? should it be added to special collection that will be deployed with all previous windows updates? and then moved to the correct collection? Again many thanks for your support, waiting your kind feedback.

KB2977292 doesnt have Bulletin ID but it is a security updates!!! What do you think??