Hello,

It is becoming more and more of a problem. People taking laptops home during patch windows or they stay home and never make it back to the network. Is there a way that I can still manage the updates on those devices using SUP? I do have it running internally.

Thanks,

The below query is designed to return all workstation in my environment minus the ones in an exclusion security group in AD and that have an active client. However they are still showing up in the collection. Is there a different way to exclude these machines?

select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.SystemGroupName != "NA\\SCCM-Exclude" and (SMS_R_System.Client is not null  and SMS_R_System.Client != 0)

I'm attempting to use SCUP to deploy Windows XP Service Pack 2 patches / updates that the company I support receives for paying for a CSA (Custom Support Agreement).

Don't ask, I can't share the patches.  Sorry.

Importing the CAB generates and "incompatible data" warning and then fails.

import : Starting Import Wizard at Thursday, September 02, 2010 11:11:17 AM
starting import from file: T:\SCCM Package Source\Software Updates\WinXPsp2 Custom\2010-08\CSA-WindowsXPSP2.CAB
Copying file: T:\SCCM Package Source\Software Updates\WinXPsp2 Custom\2010-08\CSA-WindowsXPSP2.CAB to C:\Documents and Settings\user\Local Settings\Temp\CSA-WindowsXPSP2.CAB
In import configuration the digitalsignature check for the file T:\SCCM Package Source\Software Updates\WinXPsp2 Custom\2010-08\CSA-WindowsXPSP2.CAB is set to True
import : Importing from: index.xml
Import : Found invalid data while decoding. InnerException:
import : Found invalid data while decoding.
import : Found invalid data while decoding.
Deleted file C:\Documents and Settings\user\Local Settings\Temp\ebbae76f-3997-4cbc-affb-7062906fb041\index.xml
import : Finished Automatic Import at : Thursday, September 02, 2010 11:11:58 AM
Deleted folder C:\Documents and Settings\user\Local Settings\Temp\ebbae76f-3997-4cbc-affb-7062906fb041\

I have the EXEs and a CAB file.  CSA-WindowsXPSP2.CAB contains

• index.xml
• package.cab
• package2.cab

index.xml only identifies the 2 embedded CAB files

Package.cab contains package.xml which is a 200 kb and contains many details about several patches.

Package2.cab has all kinds of nonsense in it.

Does anyone have any ideas or experience with this?  I'm guessing I'll have to call Microsoft Support, but I figured I would try this first... and yes I've already searched high and low for anything similar.

hi,

SCCM 2012 SP1, Windows Server 2012, SQL Server 2012.

Try to software updates to Windows client, but no update occur in all client workstation, check the UpdatesStore.log get below error.

No spacial settings configured in SCCM almost default setup, any idea? eager to fix.

Thanks...KEN

Hi All,

We have a new SCCM server built for legacy servers two weeks before, but when we tried to start patching for the first time, it jus downloads the software updates folder but never got the content inside the software update folder. what could be the issue?

Rgs,

Naren...

Hi. I am having something of a headache deploying Java udpates via SCUP. Initially I managed to successfully deploy Java 6_26 x86 via SCUP as per Kent's guide. It installed on my Windows 7 64 bit PC (which only had 32 bit Java), and it also installed fine on Vista and XP.

However some random cowboys spoilt my party as they have been deploying Windows 7 64 bit with Java 64 bit without supplying their build into the advance testing (ffs!).

Whenever the Java 6_26 x86 update attempted to install on a 64 bit Windows 7 PC running Java 64 bit and Java 32 bit, it failed. Interestingly, the registry did update under the syswow32 node to 1.6_26, so I suspect the fail flag is down to SCUP seeing the reg key:

HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_23

...instead of:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\JavaSoft\Java Runtime Environment\1.6.0_26

...even though my Installed Rule states:

SOFTWARE\JavaSoft\Java Runtime Environment\1.6.0_26 (and the 32bit on 64bit system box is ticked as per Kent's guide).

So I then changed things around. I created three Java SCUP updates:

x86 OS Java 32 bit

x64 OS Java 32 bit

x64 OS Java 64 bit

...and set relevant architecture dependencies along with the appropriate reg key information as per Kent's guide.

On 32 bit XP, the x86 OS Java 32 bit update works fine. On Windows 7 64 bit with both types of Java, the x64 OS Java 64 bit version works fine. However the x64 OS Java 32 bit no longer installs and reports a fail. It does with is without Java x64 installed (which is puzzling as it worked initially!). From the logs:

UpdateDeployment:

Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 14310, Result = 0x0    UpdatesDeploymentAgent    05/08/2011 16:26:23    4848 (0x12F0)
Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStatePreDownload, PercentComplete = -1, DownloadSize = 14310, Result = 0x0    UpdatesDeploymentAgent    05/08/2011 16:26:23    1140 (0x0474)
Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 14310, Result = 0x0    UpdatesDeploymentAgent    05/08/2011 16:26:23    2928 (0x0B70)
Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStateInstalling, PercentComplete = 0, DownloadSize = 14310, Result = 0x0    UpdatesDeploymentAgent    05/08/2011 16:26:30    2928 (0x0B70)
Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStateInstalling, PercentComplete = 100, DownloadSize = 14310, Result = 0x0    UpdatesDeploymentAgent    05/08/2011 16:26:34    2928 (0x0B70)
Update (Site_0B9CFB0E-6873-4588-A580-2EECB3041921/SUM_7c5565e5-2240-40c7-98eb-b5ca692d7269) Progress: Status = ciStateError, PercentComplete = 0, DownloadSize = 14310, Result = 0x80070643    UpdatesDeploymentAgent    05/08/2011 16:26:34    1140 (0x0474)
CTargetedUpdatesManager - Job completion received.    UpdatesDeploymentAgent    05/08/2011 16:26:34    1140 (0x0474)
Job Id = {B9C67869-D3C1-4290-823C-DC549B36C8E1}    UpdatesDeploymentAgent    05/08/2011 16:26:34    1140 (0x0474)
Not refreshing update presence state as error CI Info status received    UpdatesDeploymentAgent    05/08/2011 16:26:34    1140 (0x0474)

WUAHandler:

1. Update: 7c5565e5-2240-40c7-98eb-b5ca692d7269, 8   BundledUpdates: 0    WUAHandler    05/08/2011 16:21:21    900 (0x0384)
1. Update (Missing): SUN Java 6 Update 26 32 bit for x64_TEST (7c5565e5-2240-40c7-98eb-b5ca692d7269, 8)    WUAHandler    05/08/2011 16:21:21    900 (0x0384)
Async installation of updates started.    WUAHandler    05/08/2011 16:21:21    900 (0x0384)
Update 1 (7c5565e5-2240-40c7-98eb-b5ca692d7269) finished installing (0x80070643), Reboot Required? No    WUAHandler    05/08/2011 16:21:34    2120 (0x0848)
Async install completed.    WUAHandler    05/08/2011 16:21:34    2120 (0x0848)
Installation job encountered some failures. Error = 0x80240022.    WUAHandler    05/08/2011 16:21:34    900 (0x0384)
Installation of updates completed.    WUAHandler    05/08/2011 16:21:34    900 (0x0384)

The App log:

Log Name:      Application
Source:        MsiInstaller
Date:          05/08/2011 16:21:33
Event ID:      1040
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer:     
Description:
Beginning a Windows Installer transaction: C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\jre1.6.0_26\jre1.6.0_26.msi. Client Process Id: 4512.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1040</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-08-05T15:21:33.000000000Z" />
    <EventRecordID>16712</EventRecordID>
    <Channel>Application</Channel>
    <Computer>9L54T4J.isad.isadroot.ex.ac.uk</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\jre1.6.0_26\jre1.6.0_26.msi</Data>
    <Data>4512</Data>

Log Name:      Application
Source:        MsiInstaller
Date:          05/08/2011 16:21:33
Event ID:      1042
Task Category: None
Level:         Information
Keywords:      Classic
User:          SYSTEM
Computer: 
Description:
Ending a Windows Installer transaction: C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\jre1.6.0_26\jre1.6.0_26.msi. Client Process Id: 4512.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MsiInstaller" />
    <EventID Qualifiers="0">1042</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-08-05T15:21:33.000000000Z" />
    <EventRecordID>16713</EventRecordID>
    <Channel>Application</Channel>
    <Computer>9L54T4J.isad.isadroot.ex.ac.uk</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data>C:\Windows\system32\config\systemprofile\AppData\LocalLow\Sun\Java\jre1.6.0_26\jre1.6.0_26.msi</Data>
    <Data>4512</Data>

Log Name:      Application
Source:        Windows Error Reporting
Date:          05/08/2011 16:21:39
Event ID:      1001
Task Category: None
Level:         Information
Keywords:      Classic
User:          N/A
Computer:     
Description:
Fault bucket , type 0
Event Name: WindowsUpdateFailure
Response: Not available
Cab Id: 0

Problem signature:
P1: 7.5.7601.17514
P2: 80070643
P3: 7C5565E5-2240-40C7-98EB-B5CA692D7269
P4: Install
P5: 101
P6: Managed
P7:
P8:
P9:
P10:

Attached files:

These files may be available here:


Analysis symbol:
Rechecking for solution: 0
Report Id: 9d1fd172-bf76-11e0-a211-005056c00008
Report Status: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Windows Error Reporting" />
    <EventID Qualifiers="0">1001</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2011-08-05T15:21:39.000000000Z" />
    <EventRecordID>16714</EventRecordID>
    <Channel>Application</Channel>
    <Computer>9L54T4J.isad.isadroot.ex.ac.uk</Computer>
    <Security />
  </System>
  <EventData>
    <Data>
    </Data>
    <Data>0</Data>
    <Data>WindowsUpdateFailure</Data>
    <Data>Not available</Data>
    <Data>0</Data>
    <Data>7.5.7601.17514</Data>
    <Data>80070643</Data>
    <Data>7C5565E5-2240-40C7-98EB-B5CA692D7269</Data>
    <Data>Install</Data>
    <Data>101</Data>
    <Data>Managed</Data>

Any ideas?

Hello,

I am using SCCM 2007 R3.

I have a great report that I use when people ask me 'when was a machine patched and with what patches'

It shows the Security Update and Installed date from the 'Add/remove programs'. We have recently started rolling out Windows 7 machines  and the report Fails. I have read about the possibility of Windows 7 not registering security updates in Add/remove programs anymore.

What can I do to get this report working again?

It is sort of reliad upon by 20+ support staff around the world.

Thanks for any help received.

These are the Questions I would like some help finding concreate answers too to report to managment:   I know the answers to some having trouble finding supporting Micrsoft Documentation for the answers:

We are looking for options that windows updates has to offer for Future updates…

1. Postpone?  I know not possible in SCCM but can be done in WSUS - any links or work arounds?

  2. Notification of reboot pending always on top?  IS it possible to make that always on top?  -  any links or work arounds?

  3. If postpone is not available and countdown starts, notify user every 15 min of machine being restarted-  Where would this setting be 2007 2012?

  4. If none of these are available, at least the constant notification to the end user that machine is needed to be restarted after the updates installed in the task    tray? Is the constent notification for reboot after windows updates the read systry icon only or can it be made to pop up a balloon messgae every 15 minutes?

gary pearson

Hi

Clients under primary sites are not receiving any patches (Software Updates). Software distribution works across the board. The deployment works well for the clients under the central site. When I do a Scan Cycle nothing at all happens in Wuahandler.log (it should say that a scan has been initiated). Everything is set up correctly (I've double and triple checked). This happens for all clients in all primary sites (4). Any tips?

Computers show as Unknown in the update list, but if I reinstall the client and delete them from the Collection "All Systems" and reapprove them when they appear again, they will update with what patches apply to them. No errors in WindowsUpdate.log, it shows the correct . The only thing happening when I do a scan cycle is that ScanAgent.log tells me that a scan request has been added.

Thanks

I've been tasked with providing JAVA, Acrobat Reader and Flash updates via SCCM 2007 R3.

How are you doing JAVA updates?

I've heard of SCUP for Adobe updates. Is this the best way to go for Adobe updates?

Thanks!

Currently we split our Deployment Packages by Month and Region.  The purpose for splitting by region is to include only Asian/Pacific languages in our packages for sites in that region, only South American languages for sites in that region, etc.  English is deployed everywhere just for safety.  This helps reduce storage requirements on sites that are tight on space.  This also has the assumption that a computer in Japan doesn't have a Brazilian language installed.

I was posting in another thread and someone had asked why we have our packages by month instead of by year.  I really don't have an answer for that except that this structure was in place before I started at my current company.  I do know there is a Microsoft Recommendation with SCCM 2007 to keep Deployment Packages under 500 updates.  I make a few search folders for the past few years and exclude expired and superseded.  I'm left with 352 updates for 2013, 541 for 2012, and 503 for 2011.  This is likely because we have a huge environment mixing Server 2003, 2008, 2008 R2, XP, Windows 7, and now coming up with a few Server 2012/Windows 8.  Are others running over the 500 update recommendation when using Yearly packages?  If so, are people further splitting by product, or getting away from Yearly and moving to quarterly?

Finally, does anyone know if there is a difference between having a Deployment Package with 500 updates vs one with only 30 or so?  (other than size).  I would imagine the larger one would take longer for clients to process, but I'm unsure if it's noticeable.  It would be good to understand if it's faster to process 1 package with 500 updates or 12 packages with ~42 updates.  I heard somewhere that reporting is easier with Monthly deployment packages for compliance.  Is that the case?



This is the version of SCCM we currently have.

The question I have is this.  Is there a way for when a new system is picked up with SCCM that it could look at it and see what updates that new PC needs and install them to get it up to date with patches?

Right now if our Helpdesk sets up a PC they install windows updates and we have been pushing out only updates from current patches. 

So when you look at what computers need updates from old patches we have to push them out.

So is there a way to automatically install without having to search to see who needs any old patches..??

I have some machines that are failing to install patches with the following error messages

WARNING: Error: 0x800b010a when verifying trust for C:\WINDOWS\SoftwareDistribution\Download\c5af499999a336d95a14650554869d1b_ctc\windowsxp-kb2779562-x86-enu.exe

WARNING: Digital Signatures on file C:\WINDOWS\SoftwareDistribution\Download\c5af499999a336d95a14650554869d1b_ctc\windowsxp-kb2779562-x86-enu.exe are not trusted: Error 0x800b010a

The patches are successfully being downloaded into the sccm cache..............it's just that they're not being installed.

I've already tried renaming the SoftwareDistribution folder and running the wuauclt.exe /resetuthorization, wuauclt /detectnow commands.

Please advise if you've seen this before.

Jason

Jason

Hi,

I have one Windows 2003 server which has updates appearing, but when I try to install them they display failed:

The eventlog shows:

Installation Failure: Windows failed to install the following update with error 0x80070002: Security Update for Windows Server 2003 (KB2813170).

My windowsupdate log shows the following errors:

2013-06-04         14:39:21:981       916       1240       Agent   WARNING: LoadLibrary failed for srclient.dll with hr:8007007e

2013-06-04         14:40:08:167       4564      12dc       Handler               FATAL: UH: 0x80070002: InstallOrUninstallThread failed in CUHWindowsPatchHandler::HandleSingleUpdate

2013-06-04         14:40:08:167       4564      12dc       Handler                 : WARNING: Install completed: result type = 0x0, installer error = True, error = 0x80070002, disabled until reboot = No, reboot required = No

2013-06-04         14:40:08:167       4564      12dc       Handler               FATAL: UH: 0x8024200b: HandleSingleUpdate failed in CUHWindowsPatchHandler::HandleMultipleUpdates

2013-06-04         14:40:08:199       2744      f00          COMAPI                - WARNING: Exit code = 0x00000000; Call error code = 0x80240022

The wuahandler log also shows  0x80070002 as the error.

This is just happening on one server, which I have rebooted but the problem still remains.

Please help

Thanks

Jaz

I am currently on SCCM2007 and have the need to push patches and software to Windows 8 clients.

I applied the below recommended hotfixes to the site server:

WSUS hotfix: 2734608

SCCM hotfix: 2750782

Both installed fine and I rebooted the server. I do see the Windows 8 option in my program settings but when I go to SUP component properties I dont see the OS listed there. I open up the WSUS console on the server and I see Windows 8 listed there. I have tried WSUS sync and still nothing. I do not see error messages in the logs files on the server.

Any ideas? Not sure what I'm missing.

Thanks Yamini

I've installed the patch that should make Windows 8 and Server 2012 available for SCCM 2007, but only Windows 8 and the Windows Server 2012 Language Pack show up as product to select.
Windows Server 2012 itself is nowhere to be found.

Thanks,

Dennis