Hi,
What kind of updates do we need to deploy in order to get keep IE11 up-to-date, f.e. upgrade it from to IE 11 version 11.0.96. to 11.0.962x ?
I only see cumulative SECURITY updates but no cumulative updates itselves in "all software updates". What updates do we actually need to look for?
Please advise.
J.
Jan Hoedt
I am seeing a continual "failed to get volume information of drive D: in my pkgxfermgr.log when updating my remote distribution points with my update packages. The drives are online and the maching is pingable. Any clue where this is coming from or what is causing this?
I have my DP's set to 15% when transferring data during specific times during the day and I see that in the log at the same time. This is happening on multiple DP's while the transfer is going on.
Is this something to worry about or just normal logging in this file?
We had issues with an SCCM installation so we reinstalled it, after uninstalling SCCM and WSUS as well as dropping the SQL databases.
However now the reinstall is not showing all the downloads. Classification is set to all but tools
We have Windows 7 and Windows 10 products selected as below and the language is English.
Yet, after choosing "Synchronize Software Updates", waiting awhile and verify in the logs that synchronizing has completed with Microsoft. I see only 496 Updates total and when I filter that based on the product Windows 7 I only see 10.
What am I missing?
We are using SCCM 2012 R2 at current site. We have 45 Secondary Sites under 1 Primary. This is amulti-domain environment with 2 way trust relationship. We manage about25000 systems through SCCM.
We are using SCCM for monthly Microsoft patches since April 2016. I need some suggestions on patch deployment.
1. What is the best practice to deploy patches? Currently we create a software update group every month and deploy it on about 45 collections. This is creating a huge number of deployment queue.
2. How to patch newly added systems. In current scenario the system will get updates only from April 2016 onwards. Please suggest methe best way to apply old patches.
Thanks in advance
Hi Everyone,
We are deploying windows patches to servers through SCCM 2012 R2. We have stored wsus content on NAS share (remote server). There are errors likelicense terms for Malicious updates are unavailable in wsushandler.log and mostly all the servers are failed to install these updates as shown below.
I have checked permissions for wsus content folder, network service account has full control access on it. When i click ontest settings for content virtual directory in IIS 8.5 i am receiving the below messages.
Also i checked windowsupdate.log and it gives a WARNING: Fail to download eula file http://sccmservername:8530/Content/F5/71B368A480FA0B075BC2C34FEB96241BAECF36F5.txt with error 0x8024401f
Please help me to address this issue and let me know if you need any further information.
Thanks & Regards,
VJ
I can't seem to get my mind wrapped around these two reports:
Can someone please enlighten me and possibly give some examples?
I'm trying to find out which assets are compliant with our Screen Saver Timeout. We have a gpo (user config) that sets the timeout at 900secs. I then created a CI that has a script to query the value of a registry key under HKCU. I then created a CB and added the CI. But I'm getting different compliance/noncompliance count when I run the two reports. The first report says that I have 1700 compliant but when I run the second report, I only have 7 compliant.
Please please help!!
Thank you in advance!
Hi,
A curious question here. When or how does the list of available products under software updates in SCCM get updated? Is it automatic or it gets updated when updates for SCCM get installed? For example, Skype for Business 2020 (hypothetical) has been released, how does updates for it become available for selection in the product list?
Thanks!
Last month we skipped the deployment of MS16-104 due to the ActiveX issue described in KB3185319. We are working on a package to deploy that will fix the issue but it needs a little more time. It was noticed that MS16-118 has components (3191492 and 3192393 for instance) that replace 3185319 in MS16-104.
We had planned to begin deployment of the October Security-Only patches this week but it is critical that we do not have the ActiveX issue from MS16-104. The language in MS16-118 does not mention that the Known Issue is carried over into the new update but it also does not say that the issue is resolved.
Can someone please clarify whether or not this ActiveX issue is present or resolve in the October updates?
If we want to play it safe will excluding only MS16-118 prevent the carryover of KB3185319 and the ActiveX issue or do we need to delay the entire deployment?
Thanks
Hi all,
in my deployment i have suppressed the reboot after the security updates installation. Some users tell me that the pc reboots while the are working without any advise.
I restricted the access to C:\Windows\CCM\SCNotification.exe not to advertise the users about any new things deployed.
What's the cause of the reboot even if it is suppressed? If i derestrict the C:\Windows\CCM\SCNotification.exe the popup appears to advertise the users about the reboot?
Thanks
Hello Champs,
We are facing issue where Client is installing updates and status changes to "Requires Restart". But even after multiple reboots, it stays same.
([wmiclass]"\\.\root\ccm\clientsdk:CCM_ClientUtilities").DetermineIfRebootPending() -> It says Rebootpending = True. Which stays same even after I have rebooted 10 times.
This issue is being observed on many of the machines till now.
I even saw in "ROOT\ccm\SoftwareUpdates\UpdatesStore:CCM_UpdateStatus" and it also displays update as "Installed".
Any clue or direction will be greatly appreciated.
Do reply in case any more info required. I will update.
Hi,
We are having problem installing updates, when we deploy them says desktops are complaint but the updates are not installed. Windows defender and office updates coming on nicely.
Server 2012 updates and endpoint protections are running as it should aswell.
Tried making new deploys but same result.
When running a manual windows update it find the updates as missing, its on all our desktop.
Any idea what the problem might be?
Hi,
Is there any good blog/recommendation for Monthly rollups install, Oct 2016 onwards via SCCM 2012?
Should the same patch management process to be followed even for monthly rollups October onwards that we have been following till September 2016? Or any other special catch is there?
Regards,
Sourav Datta
Hi,We need to identify list of servers that OS windows are not activated via DCM of SCCM 2012.
we need Help on this
Thanks
HI
Recently we have deployed the software update. after fetching the states-5 "States for an Update in Deployment" we have listed out the "update is not required" status clients and we checked the machines manually but we can install the
same updates without any issue. Please let us know what could be the issue.
I am running single primary site 2012 R2 CU4 database on same server and reporting services. So I am trying to monitor software update deployment information and it is proving to be frustrating. The numbers don't line up depending on where you look. I look at \Monitoring\Overview\Deployments then the View Status (Live) of my deployment and I have 1,206 compliant. Yet another place, \Monitoring\Overview\Reporting\Reports\Software Updates - A Compliance\Compliance - Overall compliance, reads 1,114 compliant (summarized, just clicked run summarization and refreshed). On collection Deployments tab I have 1,270 "Successful".
What the hell! This reporting consistency stinks and I have no idea which is right if any. Am I missing something? Is this happening with others? Is there something I can do to fix this? Which is accurate?
Find this post helpful? Does this post answer your question? Be sure to mark it appropriately to help others find answers to their searches.
bought new acer computer 10/5/2016 Microsoft edge browser was doing fine as of yesterday won't allow you tube videos to play says restricted need permission to view it. why is this happening now? thanks
tony edwards
Hello,
There is something I want to run by you guys, and get a second opinion.
We are currently running ConfigMgr 1602 with WSUS 3.0 SP2 (Win 2k8 R2 OS). From what I understand, Windows 10 Update 1607 is becoming business ready on 1st of next month, i.e. computers that have deferred update selected will install that patch.
We have found out that Update 1607 is causing some issues in our environment, and would like to delay the patch deployment on our machines until its resolved. Will our machines automatically start installing 1607 update once it becomes current for business-ready computers?
We have 'Configure Automatic Updates' setting disabled via GPO, and ConfigMgr server is listed for 'Specify intranet Microsoft update service location' on all machines (I believe thats set by ConfigMgr client). Also, since we are still on WSUS 3.0 SP2, we dont have the capability to get Windows 10 Update 1607, since that feature is supported on WSUS 4.0. So currently I dont see Windows 10 Update 1607 feature update under 'All Software Updates' node.
Because of all these reasons, I believe that Win10 1607 wont get installed on machines in our environment come November 1st, but I just want to get a second opinion. I appreciate your help.
Thanks,
-Sneh