Hello and thanks in advance for any help-
I have a 1 year old SCCM 2012 R2 system and need some assistance with patching and reporting.
1. How long after a reboot before the system checks back in with the SCCM box and updates the patches installed and checks for new patches available? Our process is patch, restart, open Software Center, verify no other patches are available, check services and logs for issues and log off. But we're finding a number of machines that are missing a patch or two but didn't show it in software center after the restart.
2. I need to be able to provide, in one report either A) a list of machines in a collection and what patches each is missing, had applied or didn't need (We could probably get by with a count of didn't need but need to list what was applied and is missing) or B) a list of each patch and a the name of each server that was patched, needs the patch or didn't need the patch (again a count of what didn't need would be acceptable, others would need server names). I realize this would generate a information overload of data but thats what they want to provide the auditors on a monthly basis. And what I know about SSRS would fill volumes... and indeed does.
Our process is to deploy patches from a running patch group that is added to each month, with patches going out as available, not required for servers. No maint window is used so they sit there until someone logs in and installs them. I realize this is not what is generally used but its the way management wants it so I am trying to deliver. The compliance report is great but it doesn't provide all the information without drilling down and they want a static report that can be saved off each month showing what was done.
Thanks again for any help.