joe.crowe Posted October 6, 2012 Report post Posted October 6, 2012 Hi Community, So far, I have failed to see how Windows Updates (and Adobe updates through System Center Updates Publisher) via SCCM 2012 are in any way superior to native WSUS. I know it's supposed to be, so I must be missing something. I need to patch all machines for all MS/Adobe vulnerabilities. Most examples I see have someone picking just a single category, and filter by bulletin=ms. This omits a staggering amount of patches. How do you patch all given machines for all given (appropriate) patches? *This could be the wrong method, but this is what I've started* 1. Create software groups based on time with "Expired = no" and "Superseded = no" 2. These give pretty large results so I've create 2009 H1, 2009 H2, 2010 H1 etc. 3. Since I need to ensure that all patches are installed, I've attempted to deploy each of these groups. Only 1 has successfully deployed. Most return "The Deployment Software Updates Wizard Completed with errors Details: Error No Content was available for this software update for the languages you selected" (Language is English). It then lists all patches in the group and no deployment is created. How do you ensure you machines are patched correctly? (Both current machines and boxes in the closet that get put on the network after a long time. I've not used SCCM 2007, so please don't reference what used to be in the prior version as it'll just muddy the waters. Quote Share this post Link to post Share on other sites More sharing options...
joe.crowe Posted October 9, 2012 Report post Posted October 9, 2012 *Bumping* I posted late on Friday Quote Share this post Link to post Share on other sites More sharing options...
Iroqouiz Posted October 18, 2012 Report post Posted October 18, 2012 I have no idea why people think SCCM is better that WSUS to deploy updates with. WSUS is so easy, SCCM is too complicated. Quote Share this post Link to post Share on other sites More sharing options...
Tay Posted October 18, 2012 Report post Posted October 18, 2012 Once you get it figured out its easy. I have everything automated so I just check SCUP to see if there are any adobe updates before patch tuesday and add it to the deployment. I usually test it a little but it only takes me a couple hours a month. I just wish they would include a Java catalog. Quote Share this post Link to post Share on other sites More sharing options...
Tay Posted October 18, 2012 Report post Posted October 18, 2012 I have tried many ways to deploy updates but this works best so far in my environment. ADR's Win 7 Endpoint - Endpoint checks every few hours for updates Win XP Endpoint Win 7 Updates - Updates run every 3rd Tuesday of the month. ADR stays active to keep machines that have been off the network compliant when they check in but it won't deploy any new released updates until the ADR runs again on Tuesday. Win XP Updates Office Updates Software Group Adobe Updates - This is not a ADR. I just import the most current updates for Acro, Reader, and flash to this group and deploy with Patch Tuesday. Quote Share this post Link to post Share on other sites More sharing options...
