Part 24 - Automatic Deployment Rules (ADR) in SCCM

[@nitinbadgujar3060]

Awesome Video Jay Singh. Thank you!

[@TekNexSolutions]

You're most welcome Nitin.

[@trevor6607]

Excellent step by step. Thank you.

[@avisheksinha4640]

Just started learning SCCM in the last one month...This Video was highly informative...will help me a lot when I work on the patching activity for next month.. Jay, could you create a content for Out of Band patch deployments please.

[@TekNexSolutions]

I might not be able to record right away. Definitely add this in to my to-do list.

[@mamadousaidoudiallo7447]

This is awesome, this taught me a lot in SCCM through pratical labs and real life scenario thank you sooo muccchhhhh

[@TekNexSolutions]

I am glad it helped 😃

[@rockyballs7768]

Excellent work ! Thank you !

[@gauravSingh-ij7iy]

Simple and easy.well delivered.

[@mea5742]

Greaaaat. Thanks a lot

[@Noursbear]

Excellent thanks....

[@mdmohiuddinchy4123]

Great Work! But a question, where to define deployment to collections, and when new update arrives as per the ADR how it would know which collections to deploy. please help this part

[@TekNexSolutions]

You may have already seen, here kzbin.info/www/bejne/noiXmWykm7Kqb9k is how I added a target collection. There are few ways you can deploy updates to your target collection. I can give you an example then you can work on it further according to your needs. Let’s say you would like to deploy updates to Win 10 2004. 1. Create an analytical device collection on the basis of Win 10 version 2004. This collection will be dynamic and will keep only devices running Windows 10 version 2004. 2. Create an ADR for Win 10 2004 If there is an existing ADR, then you would deploy the Software Group linked with that ADR to your target collection. Also, in the General settings of ADR there is an option “Each time rule runs and find new updates”. Choose that selection wisely, I would suggest go with "Add to an existing Software Update Group". Otherwise, system will create new Software Update group every single time it runs. This setting can be changed later through ADR > Properties > General. I hope this will help. Let me know if you have any questions.

[@mdmohiuddinchy4123]

@@TekNexSolutions Thank you but still unclear. Let me brief a little here, Firstly, We have created 5 target collections for 5 country based on AD group. and we have an ADR configured. in your video there we know during ADR setup we can add one target collection only. for other we will add deployments to other 4 collections. the question is next month when new updates found by the ADR then will there be all 5 collection will be deployed or i need to give my hand on it.

[@TravelIndiaSolo]

Great series! Helped me a lot. Do you have any content available for the phased deployment?

[@TekNexSolutions]

Glad to hear my videos helped you. I have not covered phased deployments. You may have already checked, this is MS official documentation on phased deployments docs.microsoft.com/en-us/mem/configmgr/osd/deploy-use/create-phased-deployment-for-task-sequence.

[@veronicabuesoegido3514]

Hello! Excellent video! I have one question, if I had to change some deployment options (schedule or the User experiencie for example) where have i to change it, in the deployment under ADR or under "Software update group"? I've change the config under the ARD deployment Thx in advance!

[@sumanustelefonas1998]

Thanks!

[@ankitabangad5115]

Very Good information here. Helped me through a lot of handson on SCCM. Had one query though - Any idea if we can have the updates to be available in software center with ADR? meaning allow client to trigger the install and not let the updates install automatically as you have shown.

[@TekNexSolutions]

Hi Ankita, Thank you for the feedback. When you say allow client to trigger the install do you mean ConfigMgr client?

[@birdviews_roc401]

Awesome explanation. Quick question, How would you run the same ADR on multiple collections? Just add deployments to the same ADR? Lets say i want to run the updates on one collection on second Wednesday of the month and another collection on 3rd Wednesday . I do run multiple ADRs now but i was trying to figure out if its possible to consolidate everything?

[@TekNexSolutions]

Thank you. You have answered your question. Use the same ADR, then deploy it to different collections and specify the scheduling accordingly.

[@ishanisharma9512]

Hey Team, I am starter at SCCM and have seen all 24 videos of this tutorail. Can you please advise what should be next step from here ( have you got any further tutorials that I should follow).

[@TekNexSolutions]

Hi Ishani I have started working on a new playlist and will add more videos to it in future. Mastering MECM (SCCM) kzbin.info/aero/PLuB-nSPBO_bP3kZxr5NyAbhFeIBGZvitr

[@saichand5226]

Hi..., We had recently upgrade windows 10 version 20h2 to windows 10 21h2. But few of the system not given exact report from hardware invertory of sccm ,those already upgrade to latest version How to solve this issue ??

[@laxmikantmathapati379]

can you please share us the link/Video to disable the ADR.

[@ppuvais]

Can you do video about Task Sequence variables??

[@TekNexSolutions]

Hi Mohammad Yes, I would love to. It is just I have to allocate time for this task.

[@abdulraoofnumanmohammad4531]

Can you please teach online for me the whole course..

[@ghalibakkali3813]

Why would you pick only win10 for your ADR? Shouldn’t you get all security and critical patches ?

[@TekNexSolutions]

To demonstrate it can be targeted and tailored for your environment. That is what I had in my test environment.

[@ghalibakkali3813]

Do you have some contact information

[@TekNexSolutions]

@@ghalibakkali3813 reach out here [e-mail]. Cheers

[@ghalibakkali3813]

@@TekNexSolutions i sent you an email yesterday

[@TheSufwan1355]

I dont know what im doing wrong, everything looks fine but the software updates dont show up in the software center, Ive been doing the Software update deployment eval cycle and nothing has been pushed to the computer and I have waited for a good time now

[@TekNexSolutions]

Have you tested with the manual updates before trying ADRs?

[@TheSufwan1355]

TekNex Solutions no I have not, ill try that once im home

[@TekNexSolutions]

Sufwan Khan Try that first. And check the relative logs for troubleshooting.

[@TheSufwan1355]

@@TekNexSolutions I didnt notice I had automatic updates on the test computer so thats why nothing was pushing because it was all already installed haha, thanks for the help.

[@arig2519]

Need help please! I am able to install Applications but not Packages. I created two Packages - 7zip & AdobeReader. Both of them are set to Available and not Required and targeted to Device Collections. The 7zip package is downloaded locally on the Win10 client machine but it gets stuck on "Installing" in the Software Center. The Adobe Reader downloads the package but fails to install. So what are the logs should i check for the issue related to 7zip on Win10 client machine? Second, for AdobeReader package failure, the error on execmgr log file is "Unable to create account with access to network resources for launch: 80090345". I had already added the Network Access Account in the "Software Distribution" Component from Administration workspace in CM console > Site Server. Any suggestion on the second issue as well? Regarding the ADR, I am getting error in "UpdatesDeployment" log file "Updates will not be available".

[@TekNexSolutions]

Check Appenforce log file on the client and also check if 7zip and Adobe are available in the cache folder (c:\windows\cache). If there are available in the cache then try the same command line which is stated for the package install. Have you tested manual updates prior configuring ADRs?

[@arig2519]

@@TekNexSolutions I already mentioned earlier that my Apps are working fine so checking AppEnforce will not help because that is for applications and not packages. Yes, the package is getting downloaded to the ccmcache folder but it's throwing error regarding the Network inspite of adding the Network Account in the Software Update component from Administration workspace > Site Server

[@arig2519]

@@TekNexSolutions you also mentioned "try the command line mentioned in the package". So during the package creation in the wizard, i mentioned the Command line as "package.exe". This automatically comes up after i select Adobe Reader or 7zip. So is there any way to check if there are any specific commands applicable for 7zip or Adobe Reader for the package creation?

[@TekNexSolutions]

This is the problem. You need to specify required switches for the installation. Theoretically, application should start installing in full user interacted mode. In the most cases, application would not start at all. Obtain the correct switches and make sure you test the switches on a test machine by installing the application through command line. It is the hardest part to find the correct switches. It totally depends on the vendor whether they developed their application for a silent deployment or not. In the command line, try using /?, ?, -help or --help. For example, adobereader.exe /?. 7zip is available as msi why are you using as a package?

[@arig2519]

@@TekNexSolutions I was trying to isolate the issue with Package so that is the reason i tried to package 7zip as well but that too failed with the same error. I have the same command line for 7zip as well. It seems to me the issue is with the Network Access Account configuration because both the packages are failing with the same error. However, i also doubt it may not be Network Access Account issue because the Application works fine. It's just the packages that are creating issue.

[@himanshhkheraofficial]

😅😅😅