Expiration and Supersedence within an SCCM 2012 Software Update Context

In SCCM 2012 I have put a process together where I wait till the Friday after Patch Tuesday to begin prepping for production Software Update deployments that will take place that following week, beginning on the first Sunday following Patch Tuesday. I wait
till Friday for preparation, because the thought is if I wait till then and synchronize the patches to grab the metadata later in the week, I will not pick up any patches that may have already been superseded or expired that were just released just days before
on Patch Tuesday. 
My question is, is this a good practice? I have just been doing it this way for a while, but not sure it this is considered a best practice or what. I guess I am just looking for confirmation and also any other techniques, methods, and\or processes that
may serve me better. 
If anyone can offer any input that can give me better insight, I would greatly appreciate it. 
Thanks 

So how does it work if I sync on Patch Tuesday after the patches are released, and build my packages and deployments right after that and deploy them to the clients and then I re-run another synchronization say on that following Thursday or Friday and find
out that one of those patches that I deployed has already expired or superseded? 
Thanks Torsten

Similar Messages

  • SCCM 2012 software update point not sync with Microsoft Updat,

    Hi 
    Recently my SCCM 2012 software update is not syncing with microsoft update, am getting below error.  can any one suggest/help me how to resolve this issue.
    WebException: The remote server returned an error: (500) Internal Server Error.
    at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
       at System.Net.HttpWebRequest.GetRequestStream()
       at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
       at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
       at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
       at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
       at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
       at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

    am just trying to tracert catalog.update.microsoft.com
    from my wsus server but it is failed, would that be the reason/
    Regards,
    Madhan

  • SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

    Hi,
    We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
    Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
    can read reg value as exempel.
    IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
    I found this
    http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
    /SaiTech

    You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
    http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • SCCM 2012 Software updates

    Hi All,
    We have SCCM 2012 R2 Server, We have been using more than a years ,
    Now im facing crazy issues .
    1.every month we using sccm server for deploying windows patches  .
    2.before patching we set maintenance schedules for device group.
    3.patch deployment is working fine without any issues and we get the success 100 % compliants report in all the server .
    Note:- but after one or two months later  in Monitoring-->deployment tab-->its showing only few machines success results or deploying again old package''
    this process is keep on rotating in all the deployment .
    how to resolve this issues.
    Regards,
    Velu M

    Hi,
    You could try to initiate Software Updates Deployment Evaluation Cycle action from a problematic client, then check CIAgent.log, StateMessage.log to see if there are any helpful information.
    Reference:
    SCCM state messaging–in depth:http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx
    You could also follow the steps in the blog below to check state messages in WMI.
    Software Update Compliance Reports – Detection State Unknown
    http://blogs.technet.com/b/configmgrdogs/archive/2013/11/07/software-update-status-reports-detection-state-unknown.aspx
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • SCCM 2012 Software Updates not installing (bothh Windows patches & 3rd party updates)

    Using SCCM 2012 R2, I am having a problem getting Windows updates to install.  Applications published to people work, and basic software installations published to machines for a straight install work.  However, both Windows patches and Adobe patches
    fail to install on clients. I have imported the Adobe catalog into SCUP, and publish through WSUS. I can see the Adobe patches and Windows patches in SCCM, and can publish them. However, in deployment status out of 4 machines in my test group the Windows patches
    installed on 1 and the other 3 are still in Unknown status with category of "Client check passed/Active". However, none of them are installing the patch - they don't even seem to try.  All of those are Windows 7 PCs, incidentally. On Adobe patches,
    one PC fails and the other 3 machines still sit in Unknown status.  Certificates are distributed,
    Any ideas what might cause the deployment to not push some targets, even when it's past the deadline?
    Thanks,
    Andy Maslin

    An unknown status means that the clients are not reporting back to ConfigMgr correctly. This is often due to the WUA not pointing at the correct WSUS instance. You can verify this by examining the WUAHandler.log on one of those clients and it will clearly
    indicate an issue with this which in turn is often due to a group policy overriding the ConfigMgr behavior.
    Jason | http://blog.configmgrftw.com

  • SCCM 2012 Software Update Group Statistcs showing wrong Asset Count

    Under Software Update Groups in the summary tab the statics section shows total asset count: 5.   I only have this group deployed to only one collection with 1 machine.
    I have a second Software Update Group in the summary tab the statics section shows total asset count: 5.   I only have this group deployed to only one collection with 3 machines.
    The two collection have only one machine in common.
    I tried to run a summarization but these numbers are not updating. 
    where does the asset count come from and how do I get it to display correctly?
    Thanks,

    The asset counts shown in the console for software groups are not specific to any collection or deployment. If you want numbers specific to a collection, you need to use reporting or a console query.
    Jason | http://blog.configmgrftw.com

  • SCCM 2012 software update point issue

    The issue of "detection state unknown" (to simplify, use 'unknown' as below)  patch report status 
    The OS in our environment are mainly Win 7 - 64 bits and XP. The typical condition of "unknown" report patch status is as follows:
    1) Workstation with Win 7 - 64bits: "unknown" patch report  status is appearing
    in MS patches for Win XP or 7 - 32bits
    2) Workstation with Win XP: "unknown" patch report  status is appearing
    in MS patches for Win 7 - 32/64bits
    The "unknown" problem appears even client scan is completed in the workstation (see the second picture). The problem may be caused by application bug or configuration. Please
    kindly follow up and further seek support from Microsoft if applicable. 

    WSUS was installed and configured and work fine a few monthes ago as a part of the first try to install SUP before aplying SP 1 to SCCM.
    Both SCCM and WSUS are installed on the same server.
    now we want to deploy all updates from SCCM SUP, and the installation failed. 
    after researching online, uninstalled WSUS completely from the SCCM server, and removed SUP from the Site and rebooted the server.
    installed WSUS 3.0 SP2, when initial config of the WSUS popped up i canceled it, the only config i made
    is at the installation wizard, set the port to 8530, folders location and internal DB.
    >> i am able to open the WSUS console and connect to the "localhost" but no settings
    are configured.
    installed update 2734608, reboot.
    Installed SUP.
    and here we are.

  • SCCM 2012 - Software update error

    Hi all,
    I need some help on the below error, I get the below error when ever I try to sync the Microsoft website. Seems I have tried with all the credentials which has open access on the proxy server. But still I get the below error. I have reinstalled WSUS role
    and configured SUP point so many times. Is it a configuration problem on the SCCM server or proxy server. Can anyone help me under stand the below error
    Also I don't know 65.55.163.221:443 which is no where related to my network
    Error:
    Sync failed: UssCommunicationError: WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection
    failed because connected host has failed to respond 65.55.163.221:443~~at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context). Source: Microsoft.SystemsManagementServer.SoftwareUpdatesManagement.WsusSyncAction.WSyncAction.SyncWSUS
    Regards, Pratap

    Sync of updates via proxy can be difficult sometimes. Websense can be the worst. That's why I ALWAYS get my Primary Site Server whitelisted though the proxy - no authentication and no filtering.
    That usually gets rid of this kind of issues.
    Note you still have the configure the proxy settings - you just don't need credentials.
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • SCCM 2012 Software Metering is not working

    SCCM 2012 Software Metering is not working in our environment. Other than software metering, reports work just fine.
    I have created a few simple software metering rules with “Acrobat.exe” and “Outlook.exe”. Rules are enabled. Rules were on at least 6 months.
    When I go to software metering reports, Month parameter value is empty and I can’t choose any value.
    I ran runmetersumm.exe on our server, it did not work as intended. :
    Summarizing data up to 0 hours old.
    File Usage Summary added -1 rows in 0 seconds.
    Monthly Usage Summary added -1 rows in 0 seconds.
    I am stumped. Why would it add minus rows?
    Any ideas how I can make software metering work on our environment?
    Thank you

    Finally figured it out.
    mtrmgr.log did not find any rules when I ran executables. So I knew it wasn't working on the server side.
    After searching for a while, I found the solution from the link below:
    http://social.technet.microsoft.com/Forums/en-US/8f048512-c357-437e-89ec-cee5356a10b1/software-metering-reports-empty?forum=configmanagergeneral
    1. Deleted RULECHG.RTA under policypv.box folder
    2. Removed and recreated metering rules again.
    Everything is working again now.
    Thank you.
    I do wonder how to avoid those problems going forward though.

  • How do I block this msg from always popping up "iTunes requires Safari 4.0.3 or later to be installed to use the iTunes Store within iTunes. Use Software Update to download and install the latest version of Safari" bc I can't download the latest software?

    How do I block this msg from always popping up "iTunes requires Safari 4.0.3 or later to be installed to use the iTunes Store within iTunes. Use Software Update to download and install the latest version of Safari". I cannot download this software bc my lap top is to old. The msg literally pops up everytime I make any moves on itunes and is VERY annoying.

    I have a 2006 MacBook with an Mac OS X version 10.5.
    In that case, try downloading a Safari 5.0.5 for leopard from the following location:
    http://www.apple.com/safari/download/

  • CAS and three primary hierarchy SCCM 2012 r2 can i get any runbook from microsoft for Step by step installation

    Hi All
    need CAS and three primary hierarchy SCCM 2012 r2 can i get any runbook from microsoft for Step by step installation
    need step by step installation guide with screenshots.

    There's a lots of installation guide but each guide is for a "standard" installation, your environment is unique and you should get help to be sure to implement SCCM to fulfill your needs.
    Installing SCCM without any experience will be tricky and maintain it will be even harder. This is not a simple product.
    http://sccmentor.wordpress.com/2014/01/08/sccm-2012-r2-step-by-step-installation-guide/
    http://www.windows-noob.com/forums/index.php?/topic/4045-system-center-2012-configuration-manager-step-by-step-guides/
    Benoit Lecours | Blog: System Center Dudes

  • The update "MacBook Pro (Mid 2012) Software Update 1.0" can't be applied

    When trying to update my new Macbook Pro with Retina through Apple's software update application, I get the error:
    The update "MacBook Pro (Mid 2012) Software Update 1.0" can't be applied
    The update could not be expanded, and may have been corrupted during downloading.
    I've already went through the process twice to download this update.

    Same type of error, but getting 90% downloaded and error message that the update cannot be saved. But it then goes to the screen to apply, but with 90% only - no instructions that it will only download 90% and the rest will come during the update - not going to apply. 

  • SCCM Reporting: Software Updates / Apllication the "Installed date" is missing or null in reports

    When the “V_GS_Add_Remove_Programs” or “V_GS_Quick_Fix_Engineering” queried for installed date (the views that contains information  on updates/application
    installed date),  the “installDate0” Column returns “Null” or is
    "blank" on most of the rows.
    The machine in this example is “X”
    2. As you can see from the machines X's add remove Programs installed Date is given clearly.
    Appreciate your help on this as its for an audit report of windows updates and applications installed date, I know that some applications do not populate this value but my argument is if its visible from Programs and Features why isn't the data being collected.
    Best Regards,
    Michael

    Duplicated post.
    http://social.technet.microsoft.com/Forums/en-US/678489ad-3289-4fd6-8e84-bbaf487abacf/sccm-reporting-software-updates-apllication-the-installed-date-is-missing-or-null-in-reports?forum=configmanagergeneral
    http://www.enhansoft.com/

  • HT4623 I have a Gen 4 Ipod Touch, it is still running with IOS 4. When i go to my settings and select General there is no Software Update button to choose from. How do i update my Ipod to the new IOS system?

    I have a Gen 4 Ipod Touch, it is still running with IOS 4. When i go to my settings and select <General> there is no <Software Update> button to choose from. How do i update my Ipod to the new IOS system?

    You have to hook it up to a computer and update it to ios 5 and then there will be a "software update" button.

  • My iPhone 4S had the iOS 6 update and I have been trying to download all day but it won't work and now when I go to software update of says iOS 5.1.1 is up to date

    My iPhone 4S had the iOS 6 update and I have been trying to download all day but it won't work and now when I go to software update of says iOS 5.1.1 is up to date. And I cant restore my iPhone becuase when I go onto iTunes it says that it can't find my iPhone. I have tryed to download the most resent iTunes because I went to apple website and just hit download iTunes so I guess it's the most resent version and I don't know what to do. Should I go to an apple store?

    If your are using IOS 4, see below.
    http://support.apple.com/kb/HT4972

Maybe you are looking for

  • Adobe Creative Cloud Failure

    Firstly I have mistakenly paid for a annual membership with Adobe for their Creative Cloud.  On the surface it appeared harmless, good products but in the Cloud, makes a lot of sense in today's IT world.  So about a week ago I suddenly couldn't open

  • Performance of BO on top of SAP BI: Please share experiences

    Hi, I was wondering what your experiences are with BO on top of BW regarding performance. Kind regards, Daniel

  • How to inherit attribute values in object tables?

    I am trying to implement object inheritance with oracle 10g express. What i have done so far is created some types and subtypes. And some tables based on those types and sub types. So far i have understood that the subtypes inherit the attributes and

  • GRC FF 5.1 BACKGROUND JOB WAS NOT SCHEDULED/LOG FILE NOT YET GENERATED

    I've had FF installed in prod for 4 days. I just now got around to running the /VIRSA/ZVFATBAK job. However it only generates the logs for the last 24 hours. I know when you schedule the batch run to run hourly this will be resolved but I wanted to r

  • How to get Safari bookmarks into iPad Air?

    I have an iMac running the current version of OS X. Also have an iPad Air with IOS 8.1.3. How can I get my Safari bookmarks on the iMac over to this iPad? Because of Apple no longer allowing simple ID's, I had to create a new ID. Trying to use this s