Hi Community,
So far, I have failed to see how Windows Updates (and Adobe updates through System Center Updates Publisher) via SCCM 2012 are in any way superior to native WSUS. I know it's supposed to be, so I must be missing something.
I need to patch all machines for all MS/Adobe vulnerabilities. Most examples I see have someone picking just a single category, and filter by bulletin=ms. This omits a staggering amount of patches. How do you patch all given machines for all given (appropriate) patches?
*This could be the wrong method, but this is what I've started*
1. Create software groups based on time with "Expired = no" and "Superseded = no"
2. These give pretty large results so I've create 2009 H1, 2009 H2, 2010 H1 etc.
3. Since I need to ensure that all patches are installed, I've attempted to deploy each of these groups. Only 1 has successfully deployed. Most return "The Deployment Software Updates Wizard Completed with errors Details: Error No Content was available for this software update for the languages you selected" (Language is English). It then lists all patches in the group and no deployment is created.
How do you ensure you machines are patched correctly? (Both current machines and boxes in the closet that get put on the network after a long time.
I've not used SCCM 2007, so please don't reference what used to be in the prior version as it'll just muddy the waters.