How to calculate the compliance for an software update deployment

December 25, 2014, 7:48 am

≫ Next: Software Updates sync not working. Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

≪ Previous: SCEP Not Running Scans

$

0

0

Hi All,

I am trying to find as how do we calculate the compliance for an software update deployment.

Scenario, We have about 4000 machine in the domain. but we have some stale records in the domain which is about 1200. The AD cleanup for the stale records is planned for sometime in March.

So total number of machines in a collection (including the stale machines) are 5200.

The current compliance of that deployment shows the following status:

Complaint : 1156

In Progress : 1724

Error : 38

Unknown : 2462

And in the unknown, we have :

Client check failed/Active: 2

Client check failed/Inactive: 6

Client check passed/Active: 732

Client check passed/Inactive: 1722

Can you please suggest in understanding the formula that should be followed to get the compliance.

---

Software Updates sync not working. Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

December 26, 2014, 2:24 pm

≫ Next: sharepoint server get all Updates except share point Updates

≪ Previous: How to calculate the compliance for an software update deployment

$

0

0

I am not sure what's going on here but I can't seem to sync software updates. WSUS was added as role in SCCM 2012, rebooted, then added the Software Update role to SCCM and rebooted.

In the WCM.log it's showing:

System.Data.SqlClient.SqlException (0x80131904): Cannot open database "SUSDB" requested by the login. The login failed.~~Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.~~   at Microsoft.UpdateServices.Internal.BaseApi.SoapExceptionProcessor.DeserializeAndThrow(SoapException soapException)~~   at Microsoft.UpdateServices.Internal.DatabaseAccess.AdminDataAccessProxy.GetSubscription()~~   at Microsoft.UpdateServices.Internal.BaseApi.Subscription.Load()~~   at Microsoft.UpdateServices.Internal.BaseApi.UpdateServer.GetSubscription()~~   at Microsoft.SystemsManagementServer.WSUS.WSUSServer.IsSyncRunning()~~ClientConnectionId:00000000-0000-0000-0000-000000000000 SMS_WSUS_CONFIGURATION_MANAGER 12/26/2014 2:21:27 PM 6112 (0x17E0)
System.Data.SqlClient.SqlException (0x80131904): Cannot open database "SUSDB" requested by the login. The login failed.~~Login failed for user 'NT AUTHORITY\NETWORK SERVICE'.~~   at

I checked I checked the SQL Server Management Studio locally, and "NT AUTHORITY\NETWORK SERVICE" does appear to have "Grant" access tas Connect permission with "dbo" Grantor..

So I can't tell if this is an SCCM issue, an account issue, a WSUS issue or an SQL issue.

sharepoint server get all Updates except share point Updates

December 23, 2014, 10:32 pm

≫ Next: All Software Updates - No items found

≪ Previous: Software Updates sync not working. Login failed for user 'NT AUTHORITY\NETWORK SERVICE'

$

0

0

hi

I have a sharepoint server that sharepoint 2013 has installed on that .my Update server is sccm 2012 r2 and I checked all office 2003,2007,2010,2013 product to be synchronized .every thing is good sccm work fine in synchronizing update with Microsoft.and the share point server OS gets Updates finely .But the Problem is here that share point service doesn't get any updates .all updates deployed to OS except share Point updates.

 

whats the solution ?

thanx

All Software Updates - No items found

December 24, 2014, 1:38 am

≫ Next: do I need a local admin account on windows 7 machine to get windows update ?

≪ Previous: sharepoint server get all Updates except share point Updates

$

0

0

HI have been getting the error that all no softwareupdates found. i have local wsus server on a separate machine and i have tried to point to that update server and not the microsoft update stream but still not working

do I need a local admin account on windows 7 machine to get windows update ?

December 29, 2014, 6:10 am

≫ Next: Delete Aged Malware History

≪ Previous: All Software Updates - No items found

$

0

0

Hello

if the sccm 2012 agent or cm is already installed on a client computer such as windows 7 or 8, do I need a local admin account on windows 7 machine to get updates on that computer?  or the cm will take care of getting updates from sccm2012 server?

Thanks

Delete Aged Malware History

December 29, 2014, 10:48 pm

≫ Next: SCCM 2012 - Software Center is trying to download updates from Internet

≪ Previous: do I need a local admin account on windows 7 machine to get windows update ?

$

0

0

Hi there

Currently detected malwares are deleted within 30 days from configuration manager. Due reporting and ITGC we need to increase this value. As far as i know, i can set this in the Site Maintenance Task "Delete Aged Thread Data". Can i "safely" increase the days to e.g. 180 or 365?

Thank you and Kind Regards,

Simon

SCCM 2012 - Software Center is trying to download updates from Internet

December 24, 2014, 3:26 am

≫ Next: Problem with updates deployment on DMZ servers

≪ Previous: Delete Aged Malware History

$

0

0

The machines are running in Windows 7 32 Bit and has SC12 client. The updates are being pushed from central server but still the clients are trying to download those KB articles from MS sites. Windows Update is blocked by group policy. Please let me know which log file and what other info will help us find the solution. Hope for a response at the earliest.

Problem with updates deployment on DMZ servers

December 29, 2014, 5:00 am

≫ Next: Deployment Status shows Compliant but it is not

≪ Previous: SCCM 2012 - Software Center is trying to download updates from Internet

$

0

0

Hi,

I have problem with few servers in DMZ and updates deployment. On all devices SCCM client is installed and looks like is active. Problem is... on few servers status of required updates (in Monitoring-->reporting) is "Detection state unknown" and few others reporting correctly but... updates are not deployed. :-( I have checked firewall ports and are opened. I have reinstalled SCCM client - now changes.

Any advices what can be wrong or where start process of troubleshooting? 

Thank you

---

Deployment Status shows Compliant but it is not

December 29, 2014, 2:23 pm

≫ Next: Issue with silverlight updates December 2014

≪ Previous: Problem with updates deployment on DMZ servers

$

0

0

Trying to deploy IE10 in SCCM 2012R2. Basically deployed just as I do with monthly updates but to a separate Device Collection. I have 2 clients in this collection with IE8. I've downloaded the updates, created a software update group and deployed as required to the collection. But in monitoring the update group it shows 2 assets with status of Compliant and last status time is in the last hour. Why won't SCCM install IE10?

I had this working a couple of months ago and then it just stopped installing to clients when we moved them into the collection. I've completely redone it twice since and can't get it to work. Although my monthly updates work just fine.

Issue with silverlight updates December 2014

December 31, 2014, 3:31 am

≫ Next: Collection of computers with a specific update

≪ Previous: Deployment Status shows Compliant but it is not

$

0

0

Hi

I have a problem with Silverlight Updates, and I think it is not linked to my environment only.

I tried to deploy version 5.1.30514 but the download I get for Sccm via WSUS contains version 5.1.30214 instead, even though it should be the newer version.

When I look at my Sccm updates, all are set to expired. I checked why and saw that there were two newer versions (see KB3011970), with internal versions 5.1.31010.0 which was recalled because of problems, and replaced by version 5.1.31211.0.

The problem is that those latest versions do not show up in my SCCM view, and are set to Declined in the Wsus console.

Does one know how I could (and if I should) override the Declined status for the latest version or how I could make the previous version 5.1.30514 to deploy ? I think I could just use SCUP but since the updates are already there...

Thanks in advance

Bruno

---

bruno

Collection of computers with a specific update

December 31, 2014, 9:41 am

≫ Next: Does sccm 2012 support updating java, adobe Reader , and flash player?

≪ Previous: Issue with silverlight updates December 2014

$

0

0

I have a minor update that I need to roll back. I wanted to create a deployment that only targets machines with the update installed. For some reason I can't seem to find anything that works.

When I look at Resource Explorer I find the update isn't listed in Install Applications or Installed Software. I have a program that works to remove the patch but no computers to send them to. Sending to all computers is not really a good option.

Does sccm 2012 support updating java, adobe Reader , and flash player?

December 31, 2014, 9:41 am

≫ Next: How to create Auto Deployment Rule for Windows 7 Updates in SCCM 2012

≪ Previous: Collection of computers with a specific update

$

0

0

hello

Does sccm 2012 support updating java, adobe Reader ,  and flash player?

How to create Auto Deployment Rule for Windows 7 Updates in SCCM 2012

August 29, 2012, 7:39 pm

≫ Next: Sync takes place but doesn't actually sync updates

≪ Previous: Does sccm 2012 support updating java, adobe Reader , and flash player?

$

0

0

Hi

I'd like to know, how to create Auto Deployment Rule for Windows 7 Updates in SCCM 2012.Article below is related to deploy Windows 7 Updates by creating a manual deployment package.Can it be automated in SCCM 2012 ?

http://www.windows-noob.com/forums/index.php?/topic/4467-using-sccm-2012-rc-in-a-lab-part-6-deploying-software-updates/

Thanks

Sohail

Sync takes place but doesn't actually sync updates

January 2, 2015, 7:31 pm

≫ Next: Remote Policy Initiation for DMZ Workgroup Servers

≪ Previous: How to create Auto Deployment Rule for Windows 7 Updates in SCCM 2012

$

0

0

I've got WSUS installed on same server as the SCCM 2012 site server/SUP role server.

For a while I was getting error that products in my sync settings weren't found or matching, so I went into WSUS (again, fresh install ) and ran the wizard and let it find products/classifications, then I cancelled the Wizard. 

Now the error went away, but in SCCM I run a sync (manual or scheduled) and there are no more errors, but, it finishes really quickly and as stated before, no actual updates show up in Software Updates.

I've got plenty of products selected to Sync for but just not sure why it's not pulling them from out there.

Should I try a manual sync from WSUS? I'm holding off on doing that because I've been told doing that can have adverse effects on SCCM.

Remote Policy Initiation for DMZ Workgroup Servers

January 3, 2015, 3:55 am

≫ Next: Clarification on supersedence

≪ Previous: Sync takes place but doesn't actually sync updates

$

0

0

Hi,

I could successfully see the client as Active for a DMZ workgroup server. When forced run any policy from client properties on the server, it runs fine. However when trying to run the same from the SCCM console, it gives an error as below.

The area in "Black" denotes the name of the server. The message says "<Server Name> is not on".

The ports are already open and I have tested the patch deployments and it works successfully.

---

Clarification on supersedence

January 4, 2015, 11:30 am

≫ Next: SCCM 2012: howto find size of Windows updates to be deployed?

≪ Previous: Remote Policy Initiation for DMZ Workgroup Servers

$

0

0

The scenario is this:

I have version 5.x of an MSI and want to supersede it with version 6.x.

Using supersedence (http://technet.microsoft.com/en-us/library/gg682071.aspx), I create the application for version 6.x and then go in and say that 5 is superseded by 6. I take it that I don't have to go in and actually deploy version 6 of the application, the documentation, as I had to do with version 5 of the application. The documentation at the above link is unclear.

I am also a bit confused by these statements, which I'm guessing is the ideals behind supersedence: When you supersede an application, this applies to all future deployments and Application Catalog requests. This will not affect the existing installations of the application.

So if I supersede 5 with 6, any computer that has 5 installed wont get moved to version 6? I would think that if something was superseded the old version would be removed and replaced with the new version on old and new deployments. But I suspect this is not the case. As I see a lot of questions like mine regarding supersedence.

If one was to ignore supersedence all together how would the old version get uninstalled and replaced with the new version? Ugh!

SCCM 2012: howto find size of Windows updates to be deployed?

January 5, 2015, 2:00 am

≫ Next: scom 2012 exchange monitoring

≪ Previous: Clarification on supersedence

$

0

0

Hi,

We're about to deploy Windows updates to some hundred machines. How can I find out how big the size of these updates is (in order to estimate the load on the network).

Thanks.
J.

---

Jan Hoedt

scom 2012 exchange monitoring

January 5, 2015, 2:18 am

≫ Next: Updates installation stuck on 0%

≪ Previous: SCCM 2012: howto find size of Windows updates to be deployed?

$

0

0

hi I have a scom2012 r2 installed and exchange 2013 management pack imported .after installing agent on the exchange server agent , scom discovered components and ....  . but I've realized that I should change exchange mailbox threshold , so I did that with a local override because all exchange component are located in the same box. But it doesnt show me mailbox database size as it was showing at the beginning of installing exchange mp .

 

at first it was showing exchange mailbox count .but Now its not .

 

whats the solution ?

Updates installation stuck on 0%

January 5, 2015, 1:16 am

≫ Next: Software Center Failure Error 0x87D00705

≪ Previous: scom 2012 exchange monitoring

$

0

0

Hi,

I have problem with patching few servers in DMZ. I have deployed SUG and at beginning of update process, it looks fine - all necessary updates are visible in Software Center. But... next all updates stuck on 0% and stay in that state few hours. After this time STATUS is changing on "Past Due - will be installed". :-(

I have checked boundaries. I have created IP range boundary which cover IP range for DMZ servers. Next I have assigned this boundary to boundary group where is configured closest DP.

In LocationServices.log I see servers is point on right DP. 

What I can do next to fix it? Thank you for any advice.

Software Center Failure Error 0x87D00705

July 12, 2013, 7:56 am

≫ Next: How to remove a bad update from WSUS

≪ Previous: Updates installation stuck on 0%

$

0

0

I've been testing the installation of the latest Patch Tuesday updates on my Window 8 system. I've deployed the updates and opened Software Center to update them. Out of over 10 updates only 2 will install and the others will go into retry mode. Checking the Failed status, they all show an error code 0x87D00705. Inspection of the UpdatesHandler.log shows this for each failed deployment

Automatic Updates is currently busy, failing job.
StartProcessingUpdates - Trying to complete job ({B3449743-3BE8-41D0-BA7D-E2F0165DA887}) due to job failure 0x87d00705 
As job ({B3449743-3BE8-41D0-BA7D-E2F0165DA887}) is in failed state no presence results can be populated.

I can't seem to find what's making Automatic Updates too busy. My system has 16 GB of ram and is barely idling. Anyone seen this error before?

---

Orange County District Attorney