Windows Update/Defender Update Button Functionality

[jfdensmore]

Hello everyone. I have a question about the functionality of these buttons.  So I want SCCM to handle all Windows and Defender Updates and I have SCCM CB 1802 distributing Windows and Defender updates.  But when i click the Check for updates button in either locations on a windows 10 client all i ever see is either the image below, or an "Updates are up to date".
My question is.... are these buttons useless while using Sccm now?  Also how can i confirm my devices are actually pulling End point updates from SCCM?

And one last question, if i have sccm distributing Updates, is it necessary for me to allow the "Check online for updates from Microsoft update."  link to remain active or is it smart to eliminate that.  

 

 

 

 

[teamfox201]

On 5/22/2018 at 3:33 AM, jfdensmore said:

Hello everyone. I have a question about the functionality of these buttons.  So I want SCCM to handle all Windows and Defender Updates and I have SCCM CB 1802 distributing Windows and Defender updates.  But when i click the Check for updates button in either locations on a windows 10 client all i ever see is either the image below, or an "Updates are up to date".
My question is.... are these buttons useless while using Sccm now?  Also how can i confirm my devices are actually pulling End point updates from SCCM?

And one last question, if i have sccm distributing Updates, is it necessary for me to allow the "Check online for updates from Microsoft update."  link to remain active or is it smart to eliminate that.  

 

 

 

 

• Are these buttons useless while using Sccm now.
  • Check for updates is not entirely useless with SCCM, it forces Windows to check your local WSUS server for updates.
• How can i confirm my devices are actually pulling End point updates from SCCM.
  • Definitely get familiar with the SCCM Client log files: https://docs.microsoft.com/en-us/sccm/core/plan-design/hierarchy/log-files#BKMK_ClientLogs
  • You can look through these log files:
    • C:\Windows\CCM\Logs\DataTransferService.log   - see where its pulling the AM_Delta_Patch_x.xxx.xxx.x.exe from.
    • C:\Windows\WindowsUpdate.log - Follow what the log says on Windows 10 to actually get the log content.
    • C:\Windows\Temp\MpCmdRun.log
• Is it necessary for me to allow the "Check online for updates from Microsoft update."  link to remain active
  • No it is not necessary and you can turn it off with GPO (see Do not connect to any Windows Update Internet locations in the link below)
  • https://docs.microsoft.com/en-us/windows/deployment/update/waas-wu-settings

[jfdensmore]

Excellent thank you for your response!!   Kinda the way i was thinking it should work. Just wanted confirmation.