Quantcast
Channel: Configuration Manager 2007 Software Updates Management forum
Viewing all 700 articles
Browse latest View live
↧

Missing updates in SCCM console

May 5, 2015, 12:16 am
$
0
0

Hello,

Environment is SCCM 2007 R2. Our security scans show a lot of updates missing on our servers. When I check within SCCM, those updates are not listed in the repository. 

When I checked in WSUS, I see an alert showing updates waiting to be approved

One thing I understood was that we do not need to mess around in WSUS after configuring SUP. Can anybody please let me know if approving those updates in WSUS will make them visible in SCCM? 

This is very critical for me to address security concerns. Appreciate any assistance on this.

Regards
Ravi

↧
Search

enforcement state unknown error in SCCM 2007

May 7, 2015, 1:19 am
$
0
0

Hi There,

I have been deploying monthly security patches to client (Servers - win2008) using SCCM 2007.

In a set of collections, few servers are showing as compliant and few are "enforcement unknown".

I was verified error logs in problematic client, but there is no error logs\msg find.

I have looked below logs in the client.

1. WUAHandler.log

2. UpdatesHandler.log

3. UpdateStore.log

4. LocationServices.log

5. UpdatesDeployment.log

6. execmgr.log

7. RebootCoordinator.log

Please advise me, is there any specific word\error code I need to look on these logs.

Thanks,

Biju

 

 

↧
↧

Configuration manger Microsoft windows monthly patches

May 10, 2015, 1:31 am
$
0
0

Hello Team,

Could you please any one can assist me on the below concerns raised by one of my customer about the patch " Require" and "Not Require"

Currently the environment is SCCM 2012 SP1 with 5000 clients are managed by Configuration manager 2012.

Concerns are:

 1. We can install the patches manually on the PCs where it is showing as “not required”

2. Same patches are showing “required” and “not required” in different systems which are built from the same Golden OS Image and with same patch level.

And is that any specific Microsoft article mentioned as why the patches are shows "Not Require normally"?

It would be great if someone can advise me on this case.

Thank you!

-----

Dev

↧

Flattening update collection

May 12, 2015, 3:42 am
$
0
0

Hi,

I am receving the below error on wuhandler log for all the systems. KB3006625 is not deployed in Deployment Managment, 

No proxy information available, not setting proxy
Running single-call scan of updates
Async searching of updates using WUAgent started
Async searching completed
Finished searching for everything in single call
Flattening update collection
Update (Missing): Update for Windows 7 (KB3006625) (c74ee200-8d03-4cd0-81ad-005d755aa805, 200)

Regards,

Boopathi S

↧

MS15-051 and MS15-049 missing?

May 13, 2015, 10:34 am
$
0
0

I have synched SCCM and everything from this weeks Patch Tuesday release, except for MS15-051 and MS15-049, are available in SCCM.  Am I missing something here? 

I thought I saw that MS15-049 may be included of MS15-044.  Is this correct?  Is the same for MS15-051?  If so, then this is even more confusing than usual for MS.  If not, what gives?


Edit: checked WSUS console and they're not there either.
↧
↧

SCCM Software updates management in SCCM hirarchy

December 1, 2009, 7:41 am
$
0
0

Hi,

We have 1 central site and 2 primary child sites. When we deploy updates from the central site to clients in the child sites everything is working fine.

All child sites have a SUP role that connected to the central site (downstream). The central site use proxy to connect to the internet.

My questions are:

Is it possible to manage SU from the child site (create update list and downloading SU for packages)?

if so, do we need to connect the child sites to the internet?

Can we manage SU from a remote console?

Kobi

↧

large amounts of data flowing between client and primary where WSUS resides

February 21, 2013, 6:40 am
$
0
0

Hi,

we are getting calls from the network team blaming us for high latency caused by SCCM updates.  We run in native mode and use port 8531 for coms with WSUS.

The volume of data per client this month seems to be roughly the same, around the 60Mb mark per client connection to the WSUS server - which is also the primary.

I cherry-picked a few machines from the reported clients generating high traffic and checked where the clients where getting content from and all are getting as expected, from their local DP.  so I dont understand the volume of 60Mb+ on the communication between the client and the WSUS running on the primary?  surely the update scans against the WSUS server would only generate a small amount of traffic (not 60Mb) and once it works out what it needs it then looks for content locally?  I assumed that these client were, for some reason, downloading from the primary DP which would explain the volume of data, so I was surprised that these client are actually getting content, as expected, from the local site....

can anyone explain the possible reason for high data volumes specifically to do with updates, as the traffic is all over port 8531, between the client and the WSUS server when it is receiving the actual content locally and not from the primary DP?

thanks

doug

↧

Increase in Network Traffic from the Primary to clients over WSUS port

January 14, 2013, 11:30 am
$
0
0

Hello. My environment is SCCM 2007 SP2. We have a central server and several child primaries. The child primaries have secondaries servers that act as DPs only. The central and each child primary is a software update point. The child primary servers use the central server as their upstream server. All software update deployments are done from the central server. We also use maintenance windows with our software update deployments. The windows are currently closed.

This morning I got a call about a large increase in network from two of the child primaries to client assigned to them from the networking team. The traffic was coming over port 8530 which is the port our software update points use on these site. I examined the logs, status messages, and reporting for the servers and several of the clients. I could not find any evidence of SCCM doing anything with software updates.

Does anyone have advice on what I should be looking for?

↧
Search

local SUP(WSUS) versus central SUP only

June 25, 2011, 5:53 am
$
0
0

We do have around 150 branch offices with low bandwidth and low amount of clients (5-10 clients) there - Secondary site servers will be used at every branch office. To reduce the amount of traffic generated during updates deployment the follwoing question came up:

As every client will contact the WSUS database (SCCM distribution points are only used to get the updates content), would it be better to have a locally installed WSUS in every branch office which does mean that the WSUS database (up to 4GB) must be replicated from the central WSUS over the WAN. Or would it produce less traffic to have only a central WSUS where all clients connect to?

So amount of traffic generated by all branch office clients contacting the central WSUS versus amount of traffic for WSUS db replication (branch office WSUS from central WSUS).

Thanks  

 

↧
↧

WSUS and SUP troubles

May 19, 2015, 3:38 am
$
0
0

Hello,

I've been having troubles with updates missing in SCCM and the WSUS sync failing now. Based on several post answers, I decided to re-install SUP and WSUS.

I have done the same. I'm hitting a wall WRT one particular WSUS setting.

I noticed the hard disk filling up fast and realised this was because WSUS was downloading all updates and storing it locally. Where as, during installation of WSUS, I had unchecked the box to save updates locally! I'm not sure how this setting was enabled in the first place. Now, every time I change this setting and save, it keeps going back!

I really need to resolve this ASAP! Please help!

↧

Cannot Download Updates In SCCM: There was an error downloading the update (16389)

August 3, 2010, 2:24 am
$
0
0

When trying to download and deploy updates using SCCM we receive this error message everytime.  Despite that, the patches always seem to download to the specified folder.

I have searched the forums, this is not due to an expired update and a reboot has not fixed it (in fact we had the exact same error message with the previous site installation).

↧

Urgent: Updates Not Syncing to SCCM?

May 20, 2015, 8:22 pm
$
0
0

Hello,

I've posted a few questions over the past week related to similar issues. I'm sorry for so many posts. I thought its better to start a new post since the old ones were marked answered.

It was recently found during a security audit that several servers were missing critical updates. I found that these updates were missing in SCCM itself and hence have been missed out in the deployments.

While trying to find out what was wrong, I noticed that WSUS was displaying several updates as waiting to be approved. all this led to several posts, blogs based on which I decided to uninstall WSUS and reinstall the SUP role.

Have reinstalled WSUS & SUP at least three times this week letting them sync overnight before trying again. Now, i'm stuck with a new problem! The central site where i'm doing this, suddenly shows only 877 updates in the repository as opposed to >4000 last week! I have selected several products, classifications, checked the sync logs, I don't find any errors anywhere and now am clueless as to what hit me!

I need to have this resolved before the weekend as I am past due to deploy updates for this month. Unfortunately, my company does not have paid support so cannot approach Microsoft and I am on my own or at the mercy of ego maniacs within the organisation who will certainly make me regret approaching them :) Hence, I need to solve this with help from all of you forum experts.

Attaching the screenshots below:

Will attach more screenshots of logs in subsequent replies to this post.

Thank you all for being a ray of hope :)

↧

"Update is Required" says Compliance Report for some computers but the computer has the update!

April 7, 2009, 3:17 am
$
0
0
Hi,

I've noticed that for some updates we have lots of computers that say in the web reports that they require the update, but when you look at the computer you find that the update was installed ages ago and that the computer has done several Software Update Evaluation Cycles since then installing other patches.

Why are some computers reporting some updates with incorrect states? I've examined their logs files and when they do a revaluation of software updates they correctly identify the update as installed but in the web report the status of the update is incorrect and normally has an old 'Last Status Message' date/time.

Any ideas?
↧
↧

Update download issue for Clients

May 21, 2015, 7:14 am
$
0
0

We created a new Deployment in SCCM 2007 for May 2015 Patches and sent it to the computers.

Somehow all the computers are showing they are stuck on "Downloading Update(s) "

I am not sure what i need to check as the logs look clean, however i can see this in the ctm log

CTM job {7914034A-1BA6-4464-B141-ABC1B940011D} suspendedContentTransferManager21-05-2015 13:27:307664 (0x1DF0)
CTM job {7914034A-1BA6-4464-B141-ABC1B940011D} suspendedContentTransferManager21-05-2015 14:27:309724 (0x25FC)
CTM job {7914034A-1BA6-4464-B141-ABC1B940011D} suspendedContentTransferManager21-05-2015 14:37:398740 (0x2224)
CTM job {7914034A-1BA6-4464-B141-ABC1B940011D} suspendedContentTransferManager21-05-2015 15:27:303988 (0x0F94)

This entry shows up every 1 hour.

I am not sure what actually is pending download. I cant track it down in the logs.

Any suggestions on what i should look.

Also i found online that there is some applet know as "Software Updates Installation Progress"  , i cant seem to find that in the control panel .

We are running SCCM 2007 SP2 R2

↧

Problem getting SMS_CIContentFiles Instance

January 25, 2010, 3:16 pm
$
0
0
Hello,
   I am working on building patch package automatically. One of the things I am trying to get is the SourceURL property from the SMS_CIContentFiles object for a specific update. I am running into a problem however when attempting to get an instance of the object.

Here are the following steps I have taken:
1) Open WBEMTest and connect to the SMS Provider.
2) Click Open Instance
3) Enter SMS_CIContentFiles.ContentID=9712 (for example, any ContentID will work).

Upon doing this I receive an "Invalid Object Path" error message. According to the SDK docs, the ContentID field is a key so this should work as far as I know. Using a WQL search works fine (SELECT * FROM SMS_CIContentFiles WHERE ContentID=9712). Has anyone else run into this issue before? I know it is rather minor, but it is just a little cleaner code to get a instance instead of performing a query and looping the resultset. I can get an instance of a SMS_SoftwareUpdatesPackage object using the PackageID key, that works fine. I am just puzzeled as to why it is not working on the SMS_CIContentFiles class.

Thanks for any help!
Andrew
↧
Search

About filters and service pack2

January 25, 2010, 12:07 am
$
0
0
Hi all¡¡¡
i have 2 questions about updates.

1)Anyone knows one filter, to only view updates for windows xp and windows 2000. I have find only filters to products but anyone for operating system only.

2º)I have found a update to Wsus 2.0 This affects system center? It works with wsus or its another engine?

Thanks all.
↧

SUP: if any one of the patches require a restart, then fail the rest of the patches.

January 20, 2010, 10:40 pm
$
0
0

Hi 

These servers are in manual patching group.

I have adveriticed 3 patches . They downloaded, installed the 1<sup>st</sup> one and ‘failed on the 2<sup>nd</sup> one. . If any one of the patches require a restart, they will install successfully until the one that requires a reboot, then fail the rest. I have to be able to install one at a time, after reboot i have to install another one.  

Please advice is there any way to install multiple patches with single reboot.

↧
↧

How does a change in SCCM architecture affect WSUS?

January 20, 2010, 5:32 pm
$
0
0
We haven't used WSUS until we got into SCCM, and use it now only under SCCM auspices.
A recent rearchitecting of our SCCM infrastructure (replaced central site, de-parented and re-parented its children) appears to have affected parts of WSUS.  Some clients are not taking any updates, apparently due to synchronization issues between their WSUS server and the WSUS server's parent.  The WSUS consoles indicate there are now some patches the WSUS child servers know about that their parent does not -- probably not the way it's supposed to be.
I'm looking for guidance or best practice on how we *should* have gone about handling WSUS in our SCCM re-architecting, and how to fix sync issues now among the WSUS servers.  I did download the (150pp!!) WSUS Ops Guide, but it doesn't mention managing in an SCCM environment.  And the SCCM guidance is to stay away from the WSUS consoles anyway, let SCCM handle it.
So where do we go from here?  Any best practices from the field?

TIA.

Jeff Kantner
↧

How is everyone updating their Virtual Server hosts?

September 2, 2008, 11:21 am
$
0
0

We've just deployed a Windows 2008 server with 3 virtual test servers running on it. Applying updates to the virtual machines and rebooting them if necessary is pretty straightforward. How to apply updates to the host server and rebooting it is our concern. Is there any way to handle the state of the virtual machines when rebooting the host?

↧

CD-Rom based manual remediation of updates for remote users?

August 19, 2008, 6:29 am
$
0
0

Here's my problem:

I need to be able to burn updates with the manifest file to CD so I can manually run the updates on remote users.  We used to do this in SMS, but have been unable to find anything on doing this with the SCCM/WUS clients.  Is there an autorization.xml or similar file we could include with the updates like SMS, otherwise the users may be manually installing updates that are unneeded.

 

My environment will not allow me to set up for internet publishing of updates for remote users (field techs, etc.).  The users get the policy for the updates and the notification from establishing a VPN connection, but I have to set my boundaries so no pushes go out through the VPN or RAS.  Can I override their settings through group policy, and if so how could I reset when they get back in the office?  Can I prevent the policy from going through these boundaries?

 

Now the clients in the field continually get the notifications and windows that updates are constantly downloading unsuccessfully until we can get them back on campus, sometimes this may be months.

 

I know SCCM provides the internet option which would solve this, and BITS would not kill the VPN tunnel, but I can't get that to fly with management

 

Any ideas?

 

thx

↧
Viewing all 700 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>