Jump to content


Sign in to follow this  
joe.crowe

SCCM 2012 Windows Update - Must be missing something

Recommended Posts

Hi Community,

 

So far, I have failed to see how Windows Updates (and Adobe updates through System Center Updates Publisher) via SCCM 2012 are in any way superior to native WSUS. I know it's supposed to be, so I must be missing something.

 

I need to patch all machines for all MS/Adobe vulnerabilities. Most examples I see have someone picking just a single category, and filter by bulletin=ms. This omits a staggering amount of patches. How do you patch all given machines for all given (appropriate) patches?

 

*This could be the wrong method, but this is what I've started*

 

1. Create software groups based on time with "Expired = no" and "Superseded = no"

 

2. These give pretty large results so I've create 2009 H1, 2009 H2, 2010 H1 etc.

 

3. Since I need to ensure that all patches are installed, I've attempted to deploy each of these groups. Only 1 has successfully deployed. Most return "The Deployment Software Updates Wizard Completed with errors Details: Error No Content was available for this software update for the languages you selected" (Language is English). It then lists all patches in the group and no deployment is created.

 

How do you ensure you machines are patched correctly? (Both current machines and boxes in the closet that get put on the network after a long time.

 

I've not used SCCM 2007, so please don't reference what used to be in the prior version as it'll just muddy the waters.

Share this post


Link to post
Share on other sites


Once you get it figured out its easy. I have everything automated so I just check SCUP to see if there are any adobe updates before patch tuesday and add it to the deployment. I usually test it a little but it only takes me a couple hours a month. I just wish they would include a Java catalog.

Share this post


Link to post
Share on other sites

I have tried many ways to deploy updates but this works best so far in my environment.

 

ADR's

Win 7 Endpoint - Endpoint checks every few hours for updates

Win XP Endpoint

Win 7 Updates - Updates run every 3rd Tuesday of the month. ADR stays active to keep machines that have been off the network compliant when they check in but it won't deploy any new released updates until the ADR runs again on Tuesday.

Win XP Updates

Office Updates

 

Software Group

Adobe Updates - This is not a ADR. I just import the most current updates for Acro, Reader, and flash to this group and deploy with Patch Tuesday.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
Sign in to follow this  

×
×
  • Create New...