Deploy Software Updates with SCCM - Setup and Configure Automatic Deployment Rules (ADR)

[@TheSysadminChannel]

Sequence of Events: 0:15 - Install WSUS Role on Windows Server 1:35 - Setup and configure WSUS database 5:05 - SCCM pre-check client settings 6:02 - Create site system server and add software update role 9:51 - Post role setup checks 12:12 - Create Software update saved query 14:46 - Create software update group collection groups for deployments 18:54 - Create custom client settings and maintenance windows 21:12 - Deploy Software update groups to collections 25:38 - Software update demo on Win 7 machine 28:43 - Setup ADRs (Automatic Deployment Rules) 35:47 - Run ADR and check ADR logs 36:12 - ADR Updates DEMO

[@nialllynch5496]

Hi, great video. At 23:10 you mentioned that you are going to select a WSUS Folder that you created earlier. Where did you create this, I seem to have missed it. Thanks

[@NeonTheX]

Yeah Niall, you aren’t the only one who seemed to miss this, I have the same question ^_^

[@bjnesbitt2011]

+the sysadmin channel Can you offer direction on when the folders are created for each of the yearly update software groups?

[@mt36790]

Hi @theSysadminChannel, first, thank you so much for the video. I am setting up updates for our environment following your video. At 28:43, you got all of the months created up to Jun 2018. Did you deploy each month separately one by one before deploying the ADR?

[@Ichironiii]

I know this video is old but we are trying to set this up. I synchronize my updates and they populate in SCCM, but after awhile yours started showing up as required for your devices, some of mine do not. I have Win 10 Vms that were made around january, so they should require the latest cumulatives, however none of these are saying required? Any idea what I could look at? If it helps we are running the WSUS role and SCCM on the same server.

[@saburmirza5259]

Hi, I wanted to ask, is it a must for the client machine to have Software center so that it can install the updates. Because what I want is that I deploy an update and its automatically installed onto the client machine, without the client having to open up software center and installing the updates.

[@StreetSmartification]

Awesome videos man. A big help indeed!

[@TheSysadminChannel]

Glad you think so!

[@TonyDiazNYC]

Thank you very much for taking the time to make and upload this video

[@TheSysadminChannel]

Im glad you enjoyed it Tony. Thanks.

[@santhoshnbharadwaj7598]

Hi, I am new to SCCM, just following the documents and video links, the problem I am facing here is , not able to add the servers to groups created , the servers are already joined to domain, still not able to add servers to the test group created . Can you please help here , which document or video link should I refer. Thank you in advance. Regards, Santhosh

[@tsaguna]

Hi, I did everything but Software center not shows any updates in updatestore.log there is "Querying update status of 82 updates" It is the same amount of updates which I deployed

[@StreetSmartification]

Hi Paul, Thanks for the instructions, very informative indeed. I have a bit of issue, I am able to download/deploy updates, for example, for Windows 1909, however, the updates do not show in the Software Center in the Windows machine 1909. Having said, I attempted to install an app, Chrome, and i am able to see in the software center with no issue. Any inputs?

[@TheSysadminChannel]

I’ve seen with later versions of SCCM it installs and removes it from Software Center if it doesn’t need a reboot. You can check the deployment monitoring to see if the machine is still required or not.

[@RaidenXXII]

Could you advise on how to automate ADR Microsoft Monthly patching Compliance report to a SVC file and email the report the day after the ADR deployed on production environment? I tried to use the SCCM build in Compliance-3 report but you can not set the queries due to SUG needs to be set so only the previous month patching compliance report can be generated in SCCM build in report. Thanks in advance.

[@shakkirkadannamanna1088]

Dear Bother, Thank you for your effort that you have taken through out the series and you are really appreciated for what you are. I have newly implemented a SCCM Current branch server and all my clients have been pushed with SCCM Client as well. But, recently my SCCM management software got updated from the console since then, not a single client on my LAN are seemingly updating with any settings which i made on SCCM, even after the settings were pulled in order to have a quick update from the clients by accessing Config Manager on Control Panel. But the good thing is i can see all my clients are active & green and those could even be accessed & controlled via remote control & and all the available options like that as well. Could you please assist me with what troubleshooting methods should i have to follow in order to get it done. I have made some settings such as Organization name displayed in Software Center and 7-Zip application deployment as well but nothing were updated on software center when i open it from the client side. Any assistance from your end would be highly appreciated. Thank you

[@MohdAli-od8ln]

Extremely nice , very descriptive .. you have done an excellent video ..

[@TheSysadminChannel]

Thank you for the kind words

[@jameswardrick5252]

Good videos, I sucribed.

[@StreetSmartification]

Question: is that PAC-WSUS01 the computer name on which you have the WSUS role installed; or is it a username? Another thing I ran into towards the last phase of deploying the updates, the progress was on going and then the status changed to “failed”. Tried it a few times with the same outcome and naturally the Software Center didn’t show anything under updates. Please advise!

[@TheSysadminChannel]

PAC-WSUS01 is the name of the server that has the WSU’s role installed. For that error you might have to check the logs to see what’s happening. Try running the updates from the SCCM server itself. Sometimes you can run into issues if you’re running from a different machine with the console installed

[@brent4770]

I pushed out a client that needs to be updated. Will a new push out overwrite the other client?

[@TheSysadminChannel]

It should append to the updates that are already being pushed out. If the client already has the update installed / pushed out, nothing should happen since it should already be in compliance. Hopefully that answers your question

[@MohdAli-od8ln]

why did you create 2 Packages for 2018 , ie (Jan 2018 to May 31) and then for one package for June , I understand we would like to create ADR for paste one month only , so I understand why july was not included .. please highlight.

[@TheSysadminChannel]

Actually it's 6 packages total. One software update group for Jan, one for Feb one for March etc... all the way up to the current month, which was June in this video. If you browse to 28:43 you can see the total number of packages I created.

[@FreeJackCO]

Great Video! Thank You! Question: When you created the ADR... You selected a deployment package at 33.02 "Windows Updates for Workstation - 2018" you mention you already created. How did you create that deployment package for the ADR to reference to? Did you create a full year update group for Jan-to-Jun for the deployment package?

[@TheSysadminChannel]

HI, I created the package in the same way that I created the deployment packages for 2011-2017. 2011 shown at 21:25. When the ADR was created I was able to select the 2018 package that was created during the cut scene after 28:31. Hopefully that answers your question.

[@FreeJackCO]

@@TheSysadminChannel Yes... That answers it! Thanks!

[@MohdAli-od8ln]

Yes I think I understand, because u are using the 1/jan to 31/may group for the ADR + the month delta , but in that case why create the June Package at all

[@TheSysadminChannel]

I believe it's mentioned in the video, but if it's not.. the reason is to create a package for everything prior to the current year along with a software update group for each month of the current year. If you browse to 28:43 you can see all of the SUG created.

[@ghalibakkali3813]

thanks for the video. I have a question do you have any contact info

[@nicalicious3002]

Could save some time by setting it to manual the first time around instead of setting to automatic only to seconds later set it to manual.

[@bibitechUSA]

You might want to try this... kzbin.info/aero/PLpAbApdrZShMzfkkicS0E0_pxG6dfwLvX

[@WilsonCSLLC]

Good info but I am so glad I use zenwork. So much easier.