Added additional update to software update group, do I need to deploy it?

Hi,
I am fairly new to SCCM and I am not sure about this. Couple days ago I downloaded some windows updates and placed them into a software update group 2015Clients and created the required deployments. So today I found an additional update that needed
to be added to this update group 2015clients. So I downloaded the additional update and it was placed into the 2015Clients deployment package. My first question is why is it in the deployment package 2015Clients and not in the software update group 2015Clients
as well? Second question, the new update that is now in the deployment package group says that it is not deployed like the other updates do. Do I need to deploy this new update? I was confused because when I tried to deploy it using the same deployment name
as the other updates it wants me to use a different name. TIA

Downloading an additional update doesn't directly add an update to an update group. Those are two separate things and by that two separate actions. There is no direct link between an update group and a deployment package.
The deployed update group tells the client which updates it should install and the deployment package is the method to make the content of the update available.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Similar Messages

  • SCCM 2012: Assigned updates to update group don't get there deployment

    Hello,
    Problem:
    When I assign available updates to the update group the updates are not getting there deployment. Deployed: NO
    (Previous months no problem)
    Situation:
    SCCM 2012 SP1
    We made different Update groups. Example:
    Windows 2008 R2
    This group is deployed to different collections and has several deployments.
    Steps taken:
    Downloaded the new updates to Windows 2008 R2 Deployment Package (no errors)
    Edit Membership and added updates to the Windows 2008 R2 update group (no errors)
    When I check the update group I see the assigned updates in the group. The Downloaded Status is YES but the Deployed status is NO. When I check the update deploymensts it has no deployments.
    Any idea where to find a solution for the problem? Which logs files to check? 
    Greetings

    You could try and run this sql query to check the database directly and see if IsDeployed = 1 here. If that is the case there is just the console that is not updated. You'll need to change the Config Item ID (in red) to match the ID of your group, you'll
    find this in the console. (Right click columns and add it)
    select  all upd.CI_ID,upd.LocaleID,upd.ApplicabilityCondition,upd.ArticleID,upd.BulletinID,upd.CI_ID,upd.CI_UniqueID,upd.CIType_ID,upd.CIVersion,upd.CreatedBy,upd.CustomSeverity,upd.CustomSeverityName,upd.DateCreated,upd.DateLastModified,upd.DatePosted,upd.DateRevised,upd.EffectiveDate,upd.EULAAccepted,upd.EULAExists,upd.EULASignoffDate,upd.EULASignoffUser,upd.IsUserCI,upd.InUse,upd.IsBroken,upd.IsBundle,upd.IsChild,upd.IsContentProvisioned,upd.IsDeployable,upd.IsDeployed,upd.IsEnabled,upd.IsExpired,upd.IsHidden,upd.IsLatest,upd.IsMetadataOnlyUpdate,upd.IsOfflineServiceable,upd.IsQuarantined,upd.IsSuperseded,upd.IsUserDefined,upd.LastModifiedBy,upd.LastStatusTime,upd.Description,upd.DisplayName,upd.CIInformativeURL,upd.LocaleID,upd.MaxExecutionTime,upd.ModelID,upd.ModelName,upd.NumMissing,upd.NumNotApplicable,upd.NumPresent,upd.NumTotal,upd.NumUnknown,upd.PercentCompliant,upd.PermittedUses,upd.PlatformType,upd.RequiresExclusiveHandling,upd.RevisionNumber,upd.SDMPackageVersion,upd.SedoObjectVersion,upd.Severity,upd.SeverityName,upd.SourceSite
    from fn_ListUpdateCIs(1033) as upd,vSMS_CIRelation as cr  where ((cr.FromCIID =
    16822104
    AND cr.RelationType = 1) AND upd.CI_ID = cr.ToCIID)

  • I can not update a Windows Server 2008 R2 with Software Update Group in SCCM2012

    Hi all,
    I got some problems with update deployments these days.
    I try to configure SCCM2012 to update 1 Windows Server 2008 R2 (with Hyper-V / This server is in a cluster)
    Actually i've 4 other Hyper-V servers and i would like to add one more in the cluster called Hyper-V5. To do that i need that all Hyper-V servers use the same Windows Updates.
    I created a collection for my Hyper-V servers and then a Software Update Group with all needed updates (checked the list of another HV-Server).
    I did a deployment on this collection using this new Software Update Group.
    I checked the Sofwtare Center's logs on the Hyper-V5 server and i saw that synchronization has a successfull state.
    But there is no updates installed or displayed in Sofwtare Center.
    Here is some screenshots : Oh no i can't post image because ... "Body text cannot contain images or links until we are able to verify your account." waiting to be verified since months.
    Thanks for your help.

    Hi,
    Have you try to run Software Updates Scan Cycle and Software Updates Deployment Evaluation Cycle Actions on the client? Please check ScanAgent.log and PolicyAgent.log to see whether the client received the updates deployment policy.
    Best Regards,
    Joyce Li
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Deleting a deployment without a Software Update Group

    I deleted a Software Update group prior to removing the deployment attached. I am not unable to remove the deployment nor recreate the deployment with the same name through the Config Manager.
    Is there a was to remove the deployment package?
    Thanks.

    I deleted a Software Update group prior to removing the deployment attached. I am not unable to remove the deployment nor recreate the deployment with the same name through the Config Manager.
    That should also have removed the deployment of the software update group then.
    Torsten Meringer | http://www.mssccmfaq.de

  • Software update group - Superseded updates

    Hi all,
    I need to understand something. I have Software Update Group and it has a deployment configured . When a given update becomes superseded and I remove it from the software update group, how does this affect the configured deployment? I don't
    want to delete/recreate the deployment.  Will the deployment automatically update itself and remove the update that I removed from the Update Group, will it still try to deploy the upddate...wil it give an error...etc.
    Thanks in advance,
    Jesmat.

    The deployment is for the updates in the software update group. For currently targeted devices it will need a machine policy update before they know about the change.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Downloaded additional language for software update group question

    Hi,
    We have some clients where the updates are stuck at downloading at 66% and I think it may be due to missing a language. So I went into the software update group and redownloaded it again with the additional language selected. Do I now need to do anything
    else? Do I need to re-deploy it to the collection again? Just not sure if more is required after downloading the additional language? TIA

    Correct. You can log in to any endpoint in that state and run machine policy evaluation cycle or use right click tools to do so and you should see that client download missing update.
    Additionally, you can check logs for more details on what is really going on:
    UpdatesDeployment.log UpdatesHandler.log - both in C:\Windows\CCM\Logs folder and C:\Windows\WindowsUpdate.log

  • Add an Update to the Software Update Group - where it's been monitored?

    Hello all,
    I'm looking for a solution to get the Updates for adding to a Software Update Group in SCCM 2012 R2.
    Which components (Message type, Severity, Message ID,...) are concerned?
    Or which log files are concerned?
    I will use the "Status Filer Rules" to create an new rule that will send me an E-Mail which let me know all the Updates what have been added to the Software Update Group.
    Many Thanks
    Andreas

    Just add an update to a software update group and see if a status message is being generated. Without having tested it: I think there will be one, but it will only tell that user xyz modified SUG abc, but you won't see which update was added. 
    Torsten Meringer | http://www.mssccmfaq.de

  • Automatic create Software Update Group and assign patches

    Does someone has a e.g. powershell/vbs script which does the following:
    - step 1: verify which patches are added to Windows 7 image using SCCM 2012 Offline Servicing
    - step 2: verify all downloaded and deployed patches in the SCCM 2012 environment
    - step 3: get the multi-reboot patches
    Then creates a Software Update Group and add all patches obtained in step 2 and exclude all patches obtained in step 1 and step 3..
    Then I can assign that software update group to my Reference Image task sequence and I will not ran in the currently available problems where lists are to big and software updates during the task sequence are failing :-)
    Does some likes this and want to help me with it ?
    I think it is a nice solution for the patch deployment problem during the reference image task sequence phase.

    1.  I've not written a script for that but to be plain:  why?  There's no reason you shouldnt have those patches downloaded and deployed anyway in case someone makes a computer "the old fashioned way" then joins it to the domain.
    2.  This is what ADR is for.  I've got a few runbooks to help with things like cleaning up expired patches, but you shouldn't need any script for this step specifically.
    3.  Getting multi-reboot patches someone already did for you :)  http://blogs.technet.com/b/deploymentguys/archive/2015/03/11/excluding-known-multi-reboot-updates-during-a-zti-deployment.aspx
    Basically for #3, you just replace the update task with the MDT version and put this script right in front.  Bam, done :)  As for the extra scripting to exclude downloading patches you injected with DISM (#1)... I honestly don't see a point ...
    but I could probably write something if you wanted.

  • ADR Removes updates from existing Software Update Group

    I'm working on using SCCM for Software Updates, was previously only using WSUS. I think I've got everything configured and I can deploy updates successfully. So now I'm working on automating things with some ADRs. The problem I'm running into is that I'm
    trying to set the ADR to add updates to an existing group. Office 2007 updates in this example.  I have the search criteria in the ADR set to look for Office 2007 updates released in the last 30 days and it is set to run once a month. 
    So in my mind, each month it will run and add the necessary updates to the existing group, and the group will become a cumulative list.  The problem I'm having is that every time the rule runs, it seems to remove all the existing updates from that
    group and only add in the updates that were returned for that run.  For example, I can set the rule to search for updates released in the last 60 days and will see 15 updates in the group.  If I change the rule to search for updates released in the
    last 30 days and run it again, the group will only have 10 updates in it.  Or if I manually add updates to the group and then run the rule again, the updates I manually added are removed.  None of these are expired or superseded.  Any ideas?

    The spirit of the statement is more or less correct, but as it applies to this scenario it is not. To the clients, nothing has changed. The update is part of the update group before and after. Thus, the client only knows about the newly added updates thus
    there really is no client side processing churn except for the newly added updates. As for the SQL processing, that's what SQL does well -- that's the whole point of using a enterprise class RDBMS. Tip-toeing around SQL, particularly for a process that only
    happens once a month, is (sorry) silly. Now, if you were to do this everyday, then yes, that's bad. Once a month, it's trivial. Do of course make sure you have a good SQL maintenance plan in place that includes re-indexing and rebuilding statistics (not the
    built-in maintenance task). 
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Software Update Group CLients staus Unknown

    hi
    We have setup sccm 2012 infrastructure  which is having cas and primary ,currently we are getting compliant reports with
    Status unknown /non compliant , those machines are report 1 or 2 days before complaint ,due to machines is offline or not reachable .,management has come with request ,Legacy  wsus if a machine was complaint ,its shows complaint even systems are offline
    ,issue is when we check system  are complaint ,after some day it become comalaint in same SUG(software update Group)
    we don't have any expired updates in group ,some machines are not sending HW ,due to machines is offline  ,so management asking already complaint machines how become non complaint ... do we have any way to save those info ,I mean the history of client
    scan status in sccm 2012 ...we have put client software update scan on every 1 day ...  do we need to change the scan schedule to an extend date 
    ankith

    Legacy  wsus if a machine was complaint ,its shows complaint even systems are offline
    So does ConfigMgr - given that the client scanned once. It will only show "unknown" for updates that were recently added if the client did not report anything back after *new* items were added to the catalog. That's expected and makes sense. 
    Torsten Meringer | http://www.mssccmfaq.de

  • Deployment Package vs Right-Click, Deploy directly from Software Update Groups?

    I'm not sure I understand the difference between collecting updates into a group and then just using right-click to create a deployment from within Software Update Groups?
    One thing I did notice this morning, is that if I want to distribute that content to other DPS, I have to create deployment package first? Are there other reasons for not simply deploying from within Software Update Groups?
    Thank-you

    Update Groups *group* updates together. That's it, they have no additional functionality.
    Updates can be deployed individually or as groups (in the form of Update Groups) -- it would be pretty painful to manually deploy every update individually so that's why there are update groups.
    Update Packages (I don't like calling them deployment packages even though that's what they're labeled as in the console because they have nothing to do with deployments) make update binaries available to the clients.
    Update Groups have nothing to do with Update Packages. Update Groups contain references to updates, update packages contain binaries. Deploying an update or update group assigns those updates to the client within the collection specified. Clients that have
    an update assigned that is also applicable will download the binary for the update from any available update package and install it.
    You create an update package by right-clicking on an update or update group and choosing download. The wizard offers you a choice between using an existing package or creating a new one. You cannot directly create on.
    Secondary sites have nothing to do with this process whatsoever. Clients are clients are clients regardless of where they are located. As long as they are within t he collection targeted by the deployment and they have access to the assigned update binaries
    in an update package, they will download and install the updates properly.
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • How can I tell what Software Update Groups are members of Deployment Packages?

    I have a single SCCM 2012 SP1 CU4 server running on Windows Server 2012.
    I am trying to clean things up a little bit and I am curious:
    How can I tell which Software Update Groups use
    which Deployment Packages?  I don't see it on the Properties of either one.
    Thanks!

    Funny thing is that you can't see from the software update (in the software update group) in which deployment package(s) it exists. Your only options are manually comparing every single update (not really an option), or use PowerShell and do something
    like this:
    http://myitforum.com/myitforumwp/2014/05/12/matching-configmgr-software-updates-to-a-deployment-package-with-powershell/
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Export and Import members of a Software Update Group

    Greetings,
    I am looking for a method I can use to Export a Software Update Group (or just it's members) to a file that I can then use to Import into another 2012 hierarchy. I can't use the built-in Migration process as it is already connected to a different Hierarchy.
    I have scripts that will pull Approvals from WSUS and then import into Update groups, but I also need something that I can use to copy update groups from "DEV" to "PROD" and back again.
    Any thought or suggestions most welcome.
    Scott.

    Hi
    You cannot export Software Update Groups in ConfigMgr 2012.
    One way of doing what you what is to use Powershell to "dump" all the settings of your Software Update Groups and then use that file as a basis for creating the Software Update Group in production. Or you could just create all Software Update Groups using
    a Powerscript which runs in dev and production.
    To get you started, you could look at the snippet of code below, which I use for creating Software Update Group automatically.
    import-module ($Env:SMS_ADMIN_UI_PATH.Substring(0,$Env:SMS_ADMIN_UI_PATH.Length-5) + '\ConfigurationManager.psd1')
    $PSD = Get-PSDrive -PSProvider CMSite
    CD "$($PSD):"
    $DPDate = get-date "22-02-2011 19:00:00"
    $SUGName = "Workstaitions 2011 02 February"
    $SUGMembers = Get-CMSoftwareUpdate | Where-Object {$_.DatePosted -eq $DPDate -and $_.NumMissing -ge 1} | select CI_ID
    New-CMSoftwareUpdateGroup -Name $SUGName -UpdateId $SUGMembers.CI_ID

  • Dots in Software Update Groups names

    Hello,
    Do you know any reason why is it impossible to put a dot (".") in a name of Software Update Group? I can use dots in SUG's name created via ADR but not when I create one manually, I receive an error: "Must specify a valid name for the software
    update group".
    How can I put dots in a names for manually created SUGs?
    SCCM 5.00.7958.1000
    http://about.me/exchange12rocks

    While you might be able to create it with an ADR or with PowerShell, if the User Interface specifically prevents it from being created, its a strong bet that it isn't tested and supported by the product team.
    You're best bet is to put in feedback on Microsoft Connect asking them to allow and support it. 
    http://myitforum.com/myitforumwp/2013/12/02/giving-feedback-on-microsoft-connect-for-configmgr-2012-help-yourself-help-the-community/
    I hope that helps,
    Nash
    Nash Pherson, Senior Systems Consultant
    Now Micro -
    My Blog Posts
    If you found a bug or want the product to work differently,
    share your feedback.
    <-- If this post was helpful, please click the up arrow or propose as answer.

  • SCCM 2012 R2 changing date and time for patching software update groups

    I recieve this error when changing date and time for software update group. worked fine yesterday before patches to the server were applied last night. we removed patches but still get error below. Any help would be great.
    ConfigMgr Error Object:
    instance of SMS_ExtendedStatus
    Description = "Property array AssignedCIs exceeded the max allowed";
    ErrorCode = 1078462259;
    File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspupdatesassignment.cpp";
    Line = 94;
    Operation = "PutInstance";
    ParameterInfo = "";
    ProviderName = "ExtnProv";
    StatusCode = 2147749889;
    Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException
    The SMS Provider reported an error.
    Stack Trace:
    at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put(ReportProgress progressReport)
    at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put()
    at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(IResultObject resultObject, List`1 resultObjectsPut, Boolean retainLock)
    at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(Boolean retainLock)
    at Microsoft.ConfigurationManagement.AdminConsole.DialogFramework.Forms.SmsPropertySheet.Put(ActionTrigger trigger)
    System.Management.ManagementException
    Generic failure
    Stack Trace:
    at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put(ReportProgress progressReport)
    at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put()
    at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(IResultObject resultObject, List`1 resultObjectsPut, Boolean retainLock)
    at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(Boolean retainLock)
    at Microsoft.ConfigurationManagement.AdminConsole.DialogFramework.Forms.SmsPropertySheet.Put(ActionTrigger trigger

    no it is the final version... is working today after cleaning up database... is working now...thanks
    Hello Robert,
    would you please give some more informations, as I have the same issue and don't get what you mean bye "cleaning up databases".
    Regards ooGDoo
    ooGDoo

Maybe you are looking for