Quantcast
Channel: Configuration Manager 2012 - Security, Updates and Compliance forum
Viewing all 6382 articles
Browse latest View live

How to Retry Failed Patches in SCCM Client 2012 through script

$
0
0

Hello Friends,

When some patches failed in SCCM Client 2012 ,i just check the solution and retry the failed patches through SCCM client manually on each server.

Could  Any one  help me  that i can retry on each server by command.

its very difficult to logon on each server and retry the failed patches.


Adding update to already deployment software update group

$
0
0

Hi ,

How to do that Adding update to already deployment software update group? How to  deploy it  without create new deployment?



WSUS and SCCM Coexistence on the Same Server

$
0
0

Hello There,

I need the help of the System Center Specialists to try to understand a problem that we're facing on our company. We have a Windows 2012 R2 Machine with System Center Configuration Manager 2012 R2 SP1 installed. This machine is used to update the client machines of our environment through SCCM Updates and Clients.

Since we do not have licenses to use our Servers as SCCM clients, the old System Admin used the same WSUS that SCCM uses to create server Groups and manage the updates. In this configuration, some things seems to work, but i'm facing some issues on Windows 2008/2008 R2 clients that reports that they do not have any updates ("Windows is Up to Date") on the control panel, WindowsUpdate.log and the ReportingEvents.log in the Software Distribution Folder. I already did some wuauclt /detectnow. /updatenow, /reportnow and also removed the machines from the WSUS and joined them again, without any luck. I recreated the SoftwareDistribution folder and restarted the services, but that dont worked too. The updates that show as required on the Wsus Console are approved and already downloaded (there aren't any download in progress) and all the other servers (2012 and 2012 R2) are working great. 
My question is: is there any incompatibilities or problems that we can have if we use the WSUS Server separated from the SCCM console when they share the same Machine? I believe that the best pratice is to have different servers, but if this is really necessary, i Need to justify a new server for our manager (because of license costs). My last test was to deploy a VM with WSUS Server and then i Pointed the 2008 / 2008 R2 servers to this new WSUS Server and Everything worked fine.

Could someone please help me?

Thanks!

Security update getting failed with 0x800F0902(-2146498302)

$
0
0

Dear Experts,

We are using System Center Configuration Manager 2012 R2 SP1 on our Environment, with one Primary site and multiple secondary site, we have an issue for few user unable to install PATCH from software center getting failed with error code 0x800F0902(-2146498302). checked in WUAHandler log but unable to find any issues.

"Seems Group Policy is not yet initialized because client is on internet, writing WSUS Server location in registry. WUAHandler 3/5/2016 2:42:16 PM 1404 (0x057C)

Exceeded quota (1) of reboots to WU Agent service.

WUAHandler 3/5/2016 2:42:16 PM 1404 (0x057C)
Failed to Add Update Source for WUAgent of type (2) and id ({3CFEF09D-905D-4A31-B004-2156EF72D8EE}). Error = 0x87d0069b. WUAHandler 3/5/2016 2:42:16 PM 1404 (0x057C)"

all the patch is getting failed with same eror code

Kindly share you suggestions to resolve this issue.

THanks

Balaji


SCCM 2012 SP2 SUP not listing product Windows Server 2012 R2

$
0
0

Hi All,

Good Day!!!,

We are facing an issue with Windows Server 2012 R2 update install using SCCM.

Version details

OS= windows server 2012 R2

5.0.8239.1000  SCCM 2012 SP2 [Console / Site Versions]

6.3.9600.16384 WSUS

we could see the windows server 2012 R2 update in WSUS but the same is not synced with SCCM.

we could not see windows server 2012 R2 update on All Software update page.

when we check the wsussyncmgr.log file from sccm server we can see only the below products.

Requested categories:

Product=Windows 8,  

Product=Office 2010,

 Product=Windows Defender,

Product=Windows Server 2012,

Product=Windows Live,

Product=Windows Server 2008,

Product=Windows 7,

Product=Windows Server 2008 R2,

UpdateClassification=Security Updates,

UpdateClassification=Definition Updates,

UpdateClassification=Critical Updates

thanks in advance.


Regards, Kesa_Kara Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

SUP Error

$
0
0

Can anyone help?

My SUP on my Site Server seems to have died.  Looking in WCM.log I can see this:

The error, highlighted above reads:

System.IndexOutOfRangeException:  Index was outside the bounds of the array. 

Not sure how to go about this one.  I've restarted the WSUS administration site and the WSUS Application Pool.  Rebooted the server to restart the components but this error just repeats over and over and over.

Thanks.


Jonnie | My blog: www.deploymentshare.com | Twitter:@deploymentshare and @jonniehack

SUP with CAS and three primary sites.

$
0
0
I have an environment with a CAS and three primary's. I need to install the SUP role. Do I need to install a SUP for each of the three sites or can I install it on the CAS to serve all three sites? 

tconners

Failed to set Subscriptions on the WSUS Server. Error:(-2146233088)Unknown error 0x80131500 in SCCM 2012 Sp1 with Windows 2012 R2

$
0
0

Hi All,

I have installed SCCM 2012 Sp1 on Windows 2012 R2, now configured WSUS and added SUP, now it is not synchronizing updates, giving mentioned error


Kirpal Singh


Suppress headings

$
0
0
I have a report showing detail-lines and sumarizing qty per material. My problem is that the headings keeps repeating after each break of material, and that I want to avoid, only wanting to have heading after page-break. How is that done ?

Missing security updates for Skype for Business 2016

$
0
0

Hi,

This month (september 2016) release of Update for Skype for Business 2016 (KB3118288)is available in SCCM but when reading the details (https://support.microsoft.com/en-us/kb/3118288), the update has the prerequisiteSecurity update for Skype for Business 2016 (KB3114372), but this one is not available in SCCM.

In software Update Point, I checked all the Office 2016 and Skype products that I found.

Can anyone explain why the prerequisite KB3114372 is missing ? Is there a way to include it manually ?

Thanks


SCCM client not receiving updates

$
0
0

I'm trying to test out a new SCCM environment I created, SCCM 2012. Some software updates will be sent to the client computer, whereas other updates will not. Applications for the most part send to the client a few hours after they are supposed to.

I am able to send Google Chrome to a client, as well as some MS Windows 7 software updates. However, when I try to send a whole update package it doesn't receive on the client end. 

When I look at LocationServices.log I receive the following errors:

<![LOG[Could not load logging configuration for component ClientLocation. Using default values.]LOG]!><time="16:30:56.310+420" date="09-19-2016" component="LocationServices" context="" type="2" thread="3556" file="stdlogging.cpp:480">
<![LOG[Current AD forest name is sftc.ccctest.org, domain name is sftc.ccctest.org]LOG]!><time="16:31:02.933+420" date="09-19-2016" component="LocationServices" context="" type="1" thread="5868" file="lsad.cpp:860">
<![LOG[Domain joined client is in Intranet]LOG]!><time="16:31:02.934+420" date="09-19-2016" component="LocationServices" context="" type="1" thread="5868" file="lsad.cpp:1071">
<![LOG[Could not load logging configuration for component ClientLocation. Using default values.]LOG]!><time="10:39:19.638+420" date="09-20-2016" component="LocationServices" context="" type="2" thread="2236" file="stdlogging.cpp:480">
<![LOG[Could not load logging configuration for component ClientLocation. Using default values.]LOG]!><time="14:00:42.801+420" date="09-26-2016" component="LocationServices" context="" type="2" thread="2276" file="stdlogging.cpp:480">

Anyone know where I should start looking to resolve this issue?

software updates downloads

$
0
0

hi is there any log i can check to find who downloaded the windows security patches on the network through sccm? I could not find the package or update group but just saw some updates downloaded and sitting there. I just want to find out who so I can follow up or removed them.

Thanks

SCUP Integration with SCCM

$
0
0

Hi All,

We have Multi-tier SCCM hierarchy. Recently I integrated SCUP with SCCM 1606.  I have following doubts

1. Though I can see custom updates/Non Microsoft updates in SCCM, but can I see those updates in WSUS as well

2. If the answer, of the above question is No then from where those patches getting published in sccm

Cumulative updates not installing becaus they are superseded - conflicting with Test to Production environment

$
0
0

Hello all, i have a problem with Cumulative updates in my production environment.

I have this update proces where i download updates in an test update group, there is a deployment to a test collection.

After a month i make the updates in the test update group member of the production update group that has a deployment to a production collection.

Cumulative updates are superseded every month, this seems to have the effect that production clients detect that there is a newer update available (the one in test) and refuse to install the superseded update.

Is there a way to make clients install superseded updates or to not have clients detect that newer update are available?

Should i alter the way i work?

How do you guys handle the software update patch management in SCCM?

Clients report false data to Sccm Software Update Point

$
0
0

Hi Experts !

been working on a problem but with no luck...

we have been deploying updates with sccm for some time and in the last week i have noticed a problem

computers report that they are compliant but they are not.

for example : 

i have deployed the kb3020369 and allmost all the computers in the collection reported that the kb is not needed and didnt installed it , however - when i run the kb manually in the computer , it works smooth...

Does anyone knows the problem ? thanks for answers



SMS Writer Not found in VSS admin List writers

$
0
0

SCCM backup failed on the primary server. when checking the VSS admin List writers, only SMS writer is missing. Restarted the SMS_Site_VSS_Writer service. Also restarted the standalone primary server once. But sms writer not yet listed .      

SMSBKP.log 

Error: SMS Writer service either does not exist or is not running .SMS_SITE_BACKUP28-09-2016 19:37:418616 (0x21A8)
Error: GatherWriterMetadata failed.SMS_SITE_BACKUP28-09-2016 19:37:418616 (0x21A8)
SMS_SITE_BACKUP failed. Please see previous errors.SMS_SITE_BACKUP28-09-2016 19:37:418616 (0x21A8)
Raised backup task failure alert.SMS_SITE_BACKUP28-09-2016 19:37:418616 (0x21A8)

smswriter.log 

SMS_SITE_VSS_WRITER 0 0 - starting to build the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Error: Failed to inlcude E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\BIN into the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\ADMINUICONTENTSTAGING into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\INBOXES into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\LOGS into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\DATA into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included E:\PROGRAM FILES\MICROSOFT CONFIGURATION MANAGER\SRVACCT into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Successfully included e:\Program Files\Microsoft Configuration Manager\install.map into to the metadata.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)
Building meta data failed.SMS_SITE_VSS_WRITER28-09-2016 19:37:3710200 (0x27D8)

SCCM 2012 R2 SP1 Client PKI not work to DC server

$
0
0

Hi!

It is normal, After SCCM 2012 R2 SP1 change to PKI. Not work Clients for domain controller servers. All workstations an other member servers work fine. Client Certificate changing to PKI. But DC not work :(


cenubit

Problem with SCEP

$
0
0

Apologies if this is the wrong forum for a question about SCEP.

We have a new issue with SCEP in our environment where it is taking 30-60 seconds to finish scanning a single file downloaded from our SRS environment. Is there a way to exclude scanning downloads from local Intranet sites or sites in general?

Thank you.

Managing Software updates in DMZ

$
0
0

Hello all, I have a domain primary site servern with MP DP  FSP SUP

I also have a dmz SCCM site server with a DP, MP.

Software distribution to DMZ servers is working fine.

However now i want to start patching my dmz servers.

Do i need to install a SUP on my DMZ server?
Do i need to change something on my SCCM clients in DMZ?

How does the communication flow will work? Where can the DMZ client gets its WSUS information?

 


System Center Endpoint Protection Won't install on server 2012 R2

$
0
0

When installing system endpoint protection it fails to install and gives an error code 0x800700b7. How can I correct this and get endpoint installed?   This system had been hit by malware.   Malware removed and system restarted.

Behavior: Win32/Locky.gen!

TrojanDownload:097M/Donoff

Trojan:Win32/Rundas!plock

Thanks,

WFW

Viewing all 6382 articles
Browse latest View live


Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>