[Problems deploying critical OOB patch MS15-093]

Thanks for the suggestion. I'm just going to temporary decrease the interval for software update scans in the client settings to 24 hours so they should both be installed within a day at least that way.

[Problems deploying critical OOB patch MS15-093]

Our machines all require the pre req patch MS15-079 to be installed first so we can install MS15-093. I create a deployment including MS15-079 and MS15-093. The machines receive MS15-079 which prompts a reboot after installing and then after the reboot MS15-093 is not installed because CM sees it as not required due to the software update scan not being run yet which can take up to a week. So is this normal we have to wait up to a week for the software update scan to run before both patches will be installed? Not very effective or efficient for patches that need to get out ASAP such at MS15-093. Is there a way to force a software update scan after MS15-079 is installed and machine is rebooted?

[KB3087985 - MS15-093]

looks like ,this patch is typical behaviour and not a straight forward like other patches..Before you install KB3087985 patch ,should have KB3078071 installed as prereq and perform the software update scan again to detect KB3087985 as required.

Here is what i noticed closely:

Created update group (OOB) for these 2 patches since KB3087985 has prereq of other patch KB3078071. Deployed to collection .

Note: Clients only reported that KB3078071 (prereq) is required but not KB3087985 .

Clients started receiving the prereq patch only in software center but not KB3087985. Prereq patch installed and requested reboot. Reboot is done. Login to the PC to check if the KB3087985 is appearing software center or not.cannot see any entries in the logs about KB3087985.

So initiated the software update scan again manually ,waited for long period around 2 hours ,i see from the SCCM server that ,KB3087985 has required by this computer.

huh ,finally the patch arrived to the client that has prereq installed .

My software update scan is scheduled for 1 week not every day or so.so should i initiate software update scan on all machines to let the KB3087985 is available for you to detect ? is this how it supposed to work or something wrong from my observation ?

Since it is critical out of band update,must go as soon as but looking at this patch behaviour,seems like its will not go soon to the clients.

 

 

Having the same issue here. Our machines all require the pre req patch MS15-079 to be installed so we can install MS15-093. I create a deployment including MS15-079 and MS15-093. The machines receive MS15-079 which prompts a reboot after installing and then after the reboot MS15-093 is not installed because CM sees it as not required due to the software update scan not being run yet which can take up to a week. So is this normal we have to wait up to a week for the software update scan to run before both patches will be installed? Not very effective or efficient for patches that need to get out ASAP such at MS15-093.