I have been using SCCM 2007 for just about everything except SUP. I have used a stand alone WSUS in the past and now want to use it in SCCM2007. So I installed WSUS and got it functioning. The updates are syncing from Microsoft to the sccm 2007 server according to the logs. I can download the updates to sccm 2007 server. So I made a collection for "Windows Server 2003" with no advertisements attached. Then I made a package for "security" and "critical" updates for 2003 server and pointed it to the "Windows 2003 server" collection. It looks like I have to put the checkmark in the "Enable software updates on clients" in the "Software Updates Client Agent Properties". So if I enable that, will it push to all clients or do I have to enable it then selectively add my 2003 servers to the collection. I want to update one server at a time until I am sure I got it working correctly. Now I am a bit reluctant to move forward because I do not want to deploy any security updates to all computers and/or servers. I have been reading for months and have to get this thing working in the next week. I understand that I do not use advertisements to deploy updates. I am just not ready to cause a disaster so any help is appreciated.
↧