Having issues deploying Windows updates

System Center 2012 Config Manager - 5.0.7804.1000 running on Win Server 2008 R2 SP1
Approx 75 servers (Mix of Server 2003, 08 and 12) and 60 workstations (All Win 7 x64)
I took over managing my companys SCCM 2012 a few months ago. I have System Center 2012 Endpoint running from here for all clients with an auto-update rule to update AV signatures. All seems well with AV - I see updates being installed and custom AV profiles
being applied to each respective machine.
I've been struggling with getting Windows updates deployed. I followed guides at windows noob and others, but I'm definitely missing something.
I was trying to deploy like this: Filter updates and select ones I need (For example, my Win 7 clients - All Win 7 updates except IE 10 or 11, all Office 2010 updates, and MS Silverlight updates) From there I create a deployment package, and then deploy to
my Win 7 device collection. (We run custom apps that require IE 9, and cant upgrade IE version yet)
In that collection I have maintenance windows for every weeknight 6pm-7am, and of Saturday and Sunday. I don't use the UTC time as indicated in some of the guides, I need it to run on EST (I did try it with UTC, but did not notice a change)
I can browse to the UNC share with the updates in there and see nightly syncs with Microsoft.
Under Monitoring - System Status - Site status I see OK under all components, same with component status.
I have GPO pointing to the SCCM server with the correct port. Like I said, AV updates are being pushed out but for some reason Windows updates are not being installed. When I look at the properties of my machine for example, I see under deployments
all of my updates along with AV signatures.
Any help is greatly appreciated. Please let me know what logs or additional info are needed.
Thanks,
Jeff

Not sure what guide says that but it sounds like they are mis-interpreting what's going on. On the back-end, ConfigMgr almost always uses UTC, it's easier than always having to convert everything. But for humans, it's not easier. Also, if you're a global
enterprise, do you really want everything happening across the globe at the same time?
As for your reboots, I don't know what rebooted them -- it could have been the WUA or your MW which may have been misconfigured. I can't say what's going on other than I know it works well because I've done it for many customers in production. There are
some bugs and flukes will happen though.
My best advice at this point is to bring in someone who can sit and examine what's going on first hand (it's very difficult to do this in the forums) or open a case with CSS.
Jason | http://blog.configmgrftw.com

Similar Messages

Having issues installing windows

I have a GT60 2QD-1066US notebook, installed a new SSD in the open HD slot but having issues reinstalling windows on it, i cant seem to get any cloneing program to copy it properly, and when i install my other windows 8 media and use the key off of jellybean finder it comes up with invalid key. How do i go about reinstalling windows on this SSD hard drive that was installed or is it impossible?

Not knowing where did you get your Win8 but the DPK inside the BIOS is probably not for the version of Win8 you obtained. That DPK is only for OEM Win8.
I'll suggest you just back up your preloaded system. In your preloaded system, there's a MSI's utility "BurnRecovery" (maybe the cloning program you wanted?) which can be used for backup your preloaded system from hidden partition of the disk into a disc or a USB drive. That version of the Windows can be activated directly by the DPK inside the BIOS and no need to worry any invalid-key problem. You just need to use those disc or USB drive to recover the system on your new SSD.
If you insist to install a new version of Win8 from other medias on your new SSD, it's possible, but the activation is the problem. OEM DPK usually supports normal Windows 8 only, not pro or ultimate versions.

Issues starting Windows Update (Getting an Error message)

Hello, I have gotten a computer within the last 3 months and for that time everything was running fine. However, within the last day or two (after Windows installed an optional update) I have been having issues with opening "Windows Update". I
have googled the error message I am getting and most of the things are describing this same problem with windows media player, which I am not having the issue with. So far, I have tried clearing out my search history in the windows metro settings, cleaning
my registry, rebuilt my index, and doing an entire windows restore (which worked untill I re-installed the update) I am using Windows 8.1.
This is the error message I am getting: http://prntscr.com/582lj7
What happens is I search for windows update, click on it, then it does nothing then after a few minutes that error message pops up. Sometimes along with the windows update program, sometimes not. Often not, and then after a few good minutes a bunch of windows
update windows will pop up for each time I clicked it.
Lastly, I am also having a problem restarting my computer and I believe it may be tied to this issue it just stays at the restart screen for ever untill I manually hit the button to turn off the computer.
Do I need to do another system restore and this time don't install the update? Or, is there an easier fix to this problem?

This is the error message I am getting: http://prntscr.com/582lj7
[}.settingcontent-ms Server execution failed]
Here's one way to find what is not working:
cd /d %LocalAppData%\Packages
dir/a/b/s *.settingscontent-ms | find "Classic_{36e" | clip
Then open a Notepad window and do a Ctrl-o Ctrl-v and Enter
Somehow I think the failure may have more to do with the program which "executes" the .settingcontent-ms file extension...
C:\Users\Admin\AppData\Local\Packages>assoc .settingcontent-ms
.settingcontent-ms=SettingContent
C:\Users\Admin\AppData\Local\Packages>ftype SettingContent
File type 'SettingContent' not found or no open command associated with it.
What a surprise! OTOH consistency found in W8's continual obfuscation and unhelpfulness. ; }
For a guess about something hopefully related that you could try see
http://blogs.msdn.com/b/notime/archive/2013/10/18/fix-store-app-in-windows-8-1.aspx
<quote>
powershell -ExecutionPolicy Unrestricted Add-AppxPackage -DisableDevelopmentMode -Register $Env:SystemRoot\ImmersiveControlPanel\AppxManifest.xml
</quote>
Otherwise, as usual I would be running ProcMon to try to understand what was going on.
Good luck
Robert Aldwinckle

Manage SCCM 2012 clients in DMZ (OS Deploy, Windows updates) via DP/MP

Hi,
We ’d like to manage (=OS Deploy, Packages,Windows updates) Windows clients (Windows 2008/2012 R2 servers for now, about 20 of them) in a DMZ (= different domain).
There is this article
https://nikifoster.wordpress.com/2011/01/31/installing-configmgr-clients-on-servers-in-a-dmz/ which explains what to do … in 2011. Since then lots of things are changed I guess
Before I dive in, I’d need to have an overview + do some administrative tasks (like asking for firewall accesses).
Current setup DMZ:
Our SCCM 2012 R2 server is on a Windows 2008 R2 OS
Client communication is done via HTTP (not HTTPS)
An extra physical Distribution point is setup (only DP, nothing more) in our current domain
A new Windows 2012 server is setup in the DMZ which should host the DP and probably management point (since it should manage the clients over there)
There are clients in DMZ that are currenlty managed by SCCM 2007 but
this server will be phased out, these client have:
Correct sccm functionality
Correct DNS resolution
My steps/questions, please comment:
Add the DMZ ip range to SCCM 2012 boundary as “DMZ”
Add the network access account to be able to deploy as well clients as distribution point in DMZ
In the DMZ accesses on firewall for server VLAN have to be asked
When we have a distribution point and communication is “HTTP only” then http (port 80) from DMZ to sccm server should suffice, correct? Or are
extra firewall openings needed for management point access/packages and windows updates sync?
Now the sccm clients will be deployed to the servers in DMZ: deploy SCCM clients to hosts in DMZ, how this should be done: we connect a console to the SCCM-server in the DMZ then deploy the discovered clients?
OS Deploy should be made available, but no dhcp is available in DMZ and it is not an option either, therefore we would boot from an ISO then enter an ip (or pre-enter it so there is already filled in an ip?). So tasksequences/deployments
for servers in DMZ, where are they configured/deployed then? Via console access on DMZ management point or can we deploy on our domain SCCM management point (not in DMZ) and it will be synced to the DMZ management point? Not clear
Selective sync of software to this distribution point (howto? not sure), we don’t need any Windows 8 software/drivers to be synced.
Thanks for your input!
J.
Jan Hoedt

No comment;
I think you mean the client push installation account and the site system installation account;
More ports are required, see site server > distribution point and distribution point > management point from the provided link;
The console will always be connected to your primary site server. The client will be pushed from the primary site server and it will provide the initial files. The other files will be downloaded from the local distribution point;
The task sequence deployment will be just like a normal taks sequence deployment. The only difference is the location of the server;
Only the content that's distributed to the distribution point in the DMZ will be available on that distribution point.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Major issues after windows update

Hi,
I have a HP G42-415DX running Windows 7. After a windows update I started have some major issues.
- the sound died, it says there is no audio device installed
- i'm getting an ATI error message saying that graphics aren't functioning
- windows takes a really long time to start up
- it randomly freezes
- plug n play does not start when windows start even though it is set to automatic
i've tried updating the drivers, reinstalling the drivers, rolling the system back a week and running spybot. there is also no sound in safe mode
any help would be greatly appreciated. thank you

Thank you for completing troubleshooting gabbygal68. Let's review options! If there is no damage we can review warranty options. Please accept my follow request, follow me and send me a direct message. If there is any possible damage to the device you can then process an insurance claim here http://bit.ly/07CrqPK Thank you.
TominqueBo_VZW
Follow us on Twitter @VZWSupport

Hp Probook 4530s having issues downloading windows 10

I have tried to download windows 10 since it came out and said it was compatible with my current windows 7 but I am having issues now cause its saying it is not compatible . For the reason of the NX/XD in bios is not available or something so I went to go turn it on and I am unable to because of not being able to see it or find it. ANd then I go to Hp website looking for tech help and since my laptop is 4years old it out of warranty and they won't help me at all unless i pay them money for a small possible that they will even help me so that why i ended up here seeing if anyone can help me with my issues since Hp won't me at all unless i pay them money for help from them which in my opinion is ridiculous and horrible to do to your users. If I can't find answer this may be the last Hp Computer I ever buy cause of the lack of help from the company and the stupid hoops you have to jump through to get no where further.

Hey,
I have exactly the same problem. No problems on WIN7, but since I have WIN 8.1 the problems with sound are everytime.
If anyone can help, please.
Thanks a lot
M.

Trouble Deploying Windows updates via SCCM 2012

Hello
I'm testing Windows updates via SCCM 2012 - I have successfully deployed updates to 4 test PC's.
I then added another 15 Test PC's into the same group - Not one of them receive updates (they're all within the same Domain and even in the same room)
I reviewed "UpdatesDeployment.log -
1. I highlighted some points that stood out to me
2. I have the Maintenance window set to 24hours for this test
From the Server side and Clients side - What are the best .logs to look at.
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Suspend activity in presentation mode is selected   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Proceeding to non-business hours activites as presentation mode is off.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Attempting to install 0 updates   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
No actionable updates for install task. No attempt required.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Updates could not be installed at this time. Waiting for the next maintenance window.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)

Hi,
You could also check Windowsupdate.log on the client.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Time sync issues after windows update

Hi,
After running a windows update on VM PDC controller server can't syncronize time with online pool (update took approx 10 minutes). Event log is showing error ID 50 (The time service detected a time difference of greater than 5000 milliseconds for 900 seconds)
and time is off for 10 minutes which causes problems with Exchange and Lync services.
According to event log there has been 4 succesful connections with NTP servers before event 50 appeared on log:
The time service is now synchronizing the system time with the time source 1.uk.pool.ntp.org,0x1 (ntp.m|0x1|0.0.0.0:123->178.79.191.28:123).
The time provider NtpClient is currently receiving valid time data from 2.uk.pool.ntp.org,0x1 (ntp.m|0x1|0.0.0.0:123->87.117.251.45:123).
The time provider NtpClient is currently receiving valid time data from 3.uk.pool.ntp.org,0x1 (ntp.m|0x1|0.0.0.0:123->178.79.160.57:123).
The time provider NtpClient is currently receiving valid time data from 1.uk.pool.ntp.org,0x1 (ntp.m|0x1|0.0.0.0:123->178.79.191.28:123).
After running manual resync time is corrected, but it takes time to populate through domain computers without running gpupdate /force on each PC in domain.
PS C:\Windows\system32> W32TM /query /status
Leap Indicator: 0(no warning)
Stratum: 4 (secondary reference - syncd by (S)NTP)
Precision: -6 (15.625ms per tick)
Root Delay: 0.0447998s
Root Dispersion: 7.8017179s
ReferenceId: 0x557750E8 (source IP: 85.119.80.232)
Last Successful Sync Time: 12/06/2013 16:44:09
Source: 0.uk.pool.ntp.org,0x1
Poll Interval: 6 (64s)
PS C:\Windows\system32> W32tm /query /configuration
[Configuration]
EventLogFlags: 2 (Local)
AnnounceFlags: 5 (Local)
TimeJumpAuditOffset: 28800 (Local)
MinPollInterval: 6 (Local)
MaxPollInterval: 10 (Local)
MaxNegPhaseCorrection: 3600 (Local)
MaxPosPhaseCorrection: 3600 (Local)
MaxAllowedPhaseOffset: 300 (Local)
FrequencyCorrectRate: 4 (Local)
PollAdjustFactor: 5 (Local)
LargePhaseOffset: 50000000 (Local)
SpikeWatchPeriod: 900 (Local)
LocalClockDispersion: 10 (Local)
HoldPeriod: 5 (Local)
PhaseCorrectRate: 7 (Local)
UpdateInterval: 100 (Local)
[TimeProviders]
NtpClient (Local)
DllName: C:\Windows\system32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
AllowNonstandardModeCombinations: 1 (Local)
ResolvePeerBackoffMinutes: 15 (Local)
ResolvePeerBackoffMaxTimes: 7 (Local)
CompatibilityFlags: 2147483648 (Local)
EventLogFlags: 1 (Local)
LargeSampleSkew: 3 (Local)
SpecialPollInterval: 3600 (Local)
Type: NTP (Local)
NtpServer: 0.uk.pool.ntp.org,0x1 1.uk.pool.ntp.org,0x1 2.uk.pool.ntp.org,0x1 3.uk.pool.ntp.org,0x1 (Local)
NtpServer (Local)
DllName: C:\Windows\system32\w32time.DLL (Local)
Enabled: 1 (Local)
InputProvider: 0 (Local)
AllowNonstandardModeCombinations: 1 (Local)
VMICTimeProvider (Local)
DllName: C:\Windows\System32\vmictimeprovider.dll (Local)
Enabled: 1 (Local)
InputProvider: 1 (Local)
Server is not taking time from bare metal as it's running on Hyper-V and it seems that it's not syncing during startup correctly. Is there a possibility that there can be a config issue as it's working fine when reboot doesn't take too long?
Regards,
Marcin

1. For sure, there in VM settings you have time synchronization from host unchecked.
2. Network monitor will reveal what happens when you stop annd start Windown Time service and Systém Event log contains relevant data.
M.

Been having issues since I updated to the latest firmware on my Macbook Pro

Everytime I put my laptop to sleep, I have to manually go into network prefs and renew my DHCP lease even though it registers my airport. Also having issues with putting the laptop to sleep as well... sometimes it doesn't wake, sometimes the brightness level won't adjust for 20 seconds. Very odd. Battery life seems to have improved however... anyone else having issues? Anyone else have ideas on how to address the wifi issue I'm having?
Running 10.7.3 on my 2012 Macbook Pro 2.4Ghz i7.

Call AppleCare.
A number of people are having problems with iPads and imessage/Facetime not working anymore.
imessage and Facetime sign in activation error iPad ios8.1.2

Having issues deploying packages in sccm 2012.

I am having trouble deploying packages to my environment. From what I can tell with the trouble shooting I have done so far. The run with admin rights is not passing through to the clients. If I use a standard software package .exe or .msi (like adobe, MS
Office) the package or application installs fine. However if I use, powershell, vb, .bat, straight command line
MsiExec.exe, They all fail to what seems like it’s not passing the admin right through because I get the UAC prompt and install fails. How do I get the admin rights to work with the other forms of installs so I can push them out silent like I do with .exe and
.msi applications?
Thanks
Tony

So first, you can absolutely use Applications for more than just MSIs; for an example see:
http://blog.configmgrftw.com/configmgr-2012-application-deployment-by-example-user-exe-deployment/
For packages though, the setting is in the program and is on the environment tab in the Run Mode box. Packages merely define the source files, programs define what to do with those source files like the command-line and rights to use.
Jason | http://blog.configmgrftw.com

Issues with windows updates, unable to install certain updates

Hello, I have been having some big issues with installing a majority of windows xp updates.
Here are the updates i cannot install.
*Security Update for Microsoft .NET Framework, Version 2.0 (KB928365)*
*Windows Internet Explorer 7 for Windows XP*
*Security Update for Flash Player (KB923789)*
*Update for Windows XP (KB942763)*
*Cumulative Security Update for Internet Explorer 6 for Windows XP (KB950759)*
*Windows Malicious Software Removal Tool - June 2008 (KB890830)*
*Cumulative Security Update for ActiveX Killbits for Windows XP (KB950760)*
*Security Update for Windows XP (KB950762)*
*Security Update for Windows XP (KB951376)*
*Security Update for Windows XP (KB951698)*
My dad is also having the same issues with his mac book pro on boot camp. So i know it isnt just me.
Anyone know anything about these sort of issues?
Hope someone can help, Thanks.

I also just noticed that the net framework update that didn't install (2.0). When i checked my add/remove list it states that its already installed. Could this be an issue?

Is anyone having issues with Windows 8 phones not loading mobile versions of websites?

I was just wondering if anyone with a Windows phone is having problems loading the mobile site version of a Muse site when viewed on the phone? or if there is a known bug or incompatability?

Hello, same issue for me.
The site display whith the desktop version.

Is anybody else having issues with Software Update Server offering Airport Utility 6.1?

Running 10.7.3. Everything else is hunky dorry, but no matter what I do, I can't get this update to show up to clients.
Settings are set to:
NOT automatically copy and updates from Apple (but this update shows the blue circle reflecting it's copied)
NOT automatically enabled copied updates (but this update has the checkbox enabled)
DELETE outdated software updates (I had previosly been struggling with Choose Version, but this seems to obviate the need for that)
I've stopped swupd, removed the update, updated the catalog, re-enabled. The catalog updated, the file re-downloaded, but still.... won't show up to clients.
Is this update (Airport Utility 6.1) working for anyone else? Could it be a global issue related to this update, or is this just another instance of swupd flakiness?

You can still use iDVD even though Apple doesn't support it. It still works like a champ.
A lot has changed in the new iMovie. Some of the changes are good, but some not so much. My biggest problem is that the video quality of shared projects is INFERIOR to the old iMovie. So for now, I've gone back to the old version. Hopefully Apple will issue an update that will fix this.

Having issues with iTunes update 10.6.3 and new MacBook.

I have a brand new MacBook (also my first Mac) and I am having problems when I connect both my iPhone & iPad.
iTunes tells me I have to install the lastest version, 10.6.3. When I try to download either it looks like it has but nothing has actually updated, it tells me I need to update my software, or some times it just doesn't respond.
When I try to update my software the installer gets to a point and says inorder for the installation to finish I have to close iTunes, but it's not open. So I'm totally confused and stuck.
Help!
M-

If you've moved or renamed iTunes, put it back. If not, open iTunes from the Applications folder and not the Dock.
(68043)

Anyone having issues w/iTunes update 6.0.4?

I have 2 computers. I updated the iTunes software on my new laptop to the most recent version of iTunes on 4-23. Before the upgrade, I had no problem connecting my iPod on either computer. After that upgrade, iTunes on the laptop couldn't "see" my iPod. It just sits there with the "do not disconnect" icon flashing...I have done all of the "R's", tried to reset the iPod w/ updater 2006-03-23(but it couldn't perform that operation even in disc mode - something about not being able to mount the port...). I also can't "see" it in "My computer" in the laptop when it is connected and I get error messages telling me that there is a problem with the hardware I am trying to connect through the USB port (I tried all 6 available ports). As a last resort (thinking the iPod was crashed and headed for a repair), I connected it to my PC, which doesn't have the iTunes upgrade, and viola, it recognizes the iPod and does the update no problem. Is it possible there is a bug in the 6.0.4 software that is causing the problem??
HP dv8000 Windows XP
HP dv8000 Windows XP
HP dv8000 Windows XP

Thanks for the response.
This didn't work either, but here is what I have done.
I took a chance and downloaded the iPod updater on my PC and was able to update the iPod. Good news. Then I uninstalled iTunes on the laptop again and downloaded version six again. Plugged in the iPod, but still no response from iTunes - even in disc mode.
Question: when I re-installed iTunes it brought the existing library back in - should it do that or should the library screen be blank? I was relieved to see the library because all 4000+ songs are volume leveled, but then I began to wonder if I had really completely uninstalled iTunes...any advice here?
Another oddity that may be associated with the problem: I have a Western Digital 130 gig mass storage unit that I swap between the laptop and the PC as a backup device. The laptop is indicating that the mass storge device is connected when it isn't. The safely remove HW window indicates that the mass storage device and the iPod are connected (but the mass storage device isn't)when I click the safely remove hardware icon. If I close the WD device listing in the remove HW window it shuts down the iPod as well, clears all devices from the window and gives me the message that it is safe to remove the HW. I am beginning to think that this is the root of the evil...any ideas on this point?
If the mass storage device is the culprit (or there is a conflict between the iTunes update and that device), does anyone know how to locate the Western Digital storage device software so I can delete it? It doesn't appear in the add/remove programs and I have never had to delete HW from my system before...
Thanks in advance for the help!
Bizzy
HP dv8000 Windows XP

Having issues deploying Windows updates

Similar Messages

Maybe you are looking for