Offline deployment of Windows Update

What is the best approach for installing Windows Updates offline - that is manually downloading MS updates - and deploy these on a newly installed Windows with no Internet connection?
I tried the following - all with slow none efficient results:
1. using script - install all updates sequentially
2. extracting MSU contents and using dism install sequentially.
both were very slow and not efficient. TrustedInstaller.exe consume all CPU and all available RAM - and it seems like the updating system is choking itself with the huge updates list.
1. Is there a way to manually store the update files (msu or extracted) - and notify Windows Installer\TrustedInstaller to install the files on reboot\startup?
Would it be easier for
TrustedInstaller.exe to install these update before other application startup?
2. is there a way to download Windows update - and merge them to a single update? assuming a single transaction would be easier for the system to deploy?
3. What is the most practical way to download Windows update content by OS type (ie Windows7) - am looking for a Microsoft solution rather than existing software even if free - just wandering what is the recommended Microsoft procedure to do that.

i did not use
https://catalog.update.microsoft.com/v7/site/Install.aspx
since xp - i keep getting:
"To use this Web site's full functionality, you must be running Microsoft Internet Explorer 6.0 or later."I
tried with MSIE8 and MSIE11 - got the same results.
Was this link obsolete - or is my MSIE missing something?
I will give WSUS a try - though my secured lab machines do not belong to any network (standalone) - the manual export looks interesting - i hope to find a good export\import capabilities.
Do you assume using WSUS output will avoid TrustedInstaller.exe memory and cpu usage? I am seeing a lot of reports on this application similar behavior with no answer on how to solve this (only work around on how to clean its cache)
Thanks

Similar Messages

Deployment software windows update

HI,
I created a deployment software windows update
I sent it to the station -in the monitor ,It shows me that it has been installed
But the station did not receive a warning of something installed, I looked in software center and there does not appear in the package I spread the message.
Where can I make sure it is installed?
thanks
אם תגובתי פתרה את בעייתך - לחץ/י, על "סמן כתשובה" ליד סימן ה V הירוק.

I do not see the updates in View installed updates
אם תגובתי פתרה את בעייתך - לחץ/י, על "סמן כתשובה" ליד סימן ה V הירוק.
The first place to look for any deployment status is logs . logs can help you what is going behind the scenes.there is no point always looking at software center if something not working. You never provide the sufficient/correct information about your problem.
Did you deploy software update ? if so ,how ? using SUP method or application or package ? troubleshooting steps varies for each method.
if SUP,look at updatedeployment.log,updatestore.log
if package,look at execmgr.log
if application,look at appdiscovery.log,appenforce.log,appintent.log.
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr

Portable Offline Deployment Of Windows 7?

In our office, we use MDT 2010 the normal way with a server hosting a MDT deployment share plus a WDS server for PXE boot and a KMS server to activate Windows and it works OK.
However, now we have a need for a remote tech to travel to small offices and reimage systems. The systems will have all the same apps so we will bake the apps into the images. The only differences will be drivers for different model PCs so it
must be able to inject the correct drivers into the systems as needed.
We would like him to simply take a 32 or 64GB USB stick with the images and have the deployment all work offline from the USB key without need to connect to a remote share for anything.
Once the system is imaged, then they will connect it to the local network for Windows MAK activation, Windows Updates and antivirus updates. Most of these PC will be installed into workgroups, but a few may be joined to a domain.
What is the best way to do this without the remote tech carrying around any equipment other than a USB stick or a small, portable external hard drive?

I think cretaing cutom media is the way to go (advanced configuration - media). Keep in mind you will have to do teh PE and customsettings customisations again per medium.
You can use the ISO to create a bootable usb medium in the same way you would build a bootable usb driver from Windows install media.
Note that the KMS license will not activate if it cannot reach a KMS server. Consider using a MAK key if these users will not be visiting you offices.
MCP/MCSA/MCTS/MCITP

Image Deployment Changes Windows Update from Windows and MS Update to Just Windows Only

Before capturing an image I make sure that Windows update is set to update "Windows and other products from Microsoft Update". After and capturing and deploying the image I notice on the client machine it has been set to Windows only. There
is nothing in the TS that I know of that would switch this....I am not running any updates or anything in the TS. Anyone have any ideas on this? Thanks in advance

Sysprep changes this setting before the image is captured. This is normal behaviour.
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

Deploying a Windows update MSU-file in SCCM 2007

Hi all,
we have SCCM 2007. I have a Windows Update file that i need to deploy via SCCM. Its a file with the extension msu. Do i need to convert it to an exe file? If so, how would i be able to do it?
Please advice. Thank you.
Tram

Hi,
You don't need to convert the update, you use WUSA.exe with the MSU file eg. wusa.exe Windows6.0-KB934307-x86.msu /quiet
Take a look at these two articles they explain how to distribute the file:
http://support.microsoft.com/kb/934307/en-US
http://blogs.msdn.com/steverac/archive/2009/01/17/how-to-install-sccm-patches-manually-on-vista-server-2008.aspx
Kent Agerlund

Manage SCCM 2012 clients in DMZ (OS Deploy, Windows updates) via DP/MP

Hi,
We ’d like to manage (=OS Deploy, Packages,Windows updates) Windows clients (Windows 2008/2012 R2 servers for now, about 20 of them) in a DMZ (= different domain).
There is this article
https://nikifoster.wordpress.com/2011/01/31/installing-configmgr-clients-on-servers-in-a-dmz/ which explains what to do … in 2011. Since then lots of things are changed I guess
Before I dive in, I’d need to have an overview + do some administrative tasks (like asking for firewall accesses).
Current setup DMZ:
Our SCCM 2012 R2 server is on a Windows 2008 R2 OS
Client communication is done via HTTP (not HTTPS)
An extra physical Distribution point is setup (only DP, nothing more) in our current domain
A new Windows 2012 server is setup in the DMZ which should host the DP and probably management point (since it should manage the clients over there)
There are clients in DMZ that are currenlty managed by SCCM 2007 but
this server will be phased out, these client have:
Correct sccm functionality
Correct DNS resolution
My steps/questions, please comment:
Add the DMZ ip range to SCCM 2012 boundary as “DMZ”
Add the network access account to be able to deploy as well clients as distribution point in DMZ
In the DMZ accesses on firewall for server VLAN have to be asked
When we have a distribution point and communication is “HTTP only” then http (port 80) from DMZ to sccm server should suffice, correct? Or are
extra firewall openings needed for management point access/packages and windows updates sync?
Now the sccm clients will be deployed to the servers in DMZ: deploy SCCM clients to hosts in DMZ, how this should be done: we connect a console to the SCCM-server in the DMZ then deploy the discovered clients?
OS Deploy should be made available, but no dhcp is available in DMZ and it is not an option either, therefore we would boot from an ISO then enter an ip (or pre-enter it so there is already filled in an ip?). So tasksequences/deployments
for servers in DMZ, where are they configured/deployed then? Via console access on DMZ management point or can we deploy on our domain SCCM management point (not in DMZ) and it will be synced to the DMZ management point? Not clear
Selective sync of software to this distribution point (howto? not sure), we don’t need any Windows 8 software/drivers to be synced.
Thanks for your input!
J.
Jan Hoedt

No comment;
I think you mean the client push installation account and the site system installation account;
More ports are required, see site server > distribution point and distribution point > management point from the provided link;
The console will always be connected to your primary site server. The client will be pushed from the primary site server and it will provide the initial files. The other files will be downloaded from the local distribution point;
The task sequence deployment will be just like a normal taks sequence deployment. The only difference is the location of the server;
Only the content that's distributed to the distribution point in the DMZ will be available on that distribution point.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Windows Updates confusion

I have a single SCCM 2012 SP1 CU4 server running on Windows 2012 Server.
I have read so many guides and forums (which have all been great), but I am confused on a few things regarding Windows Updates.
Let's say the hard drive dies on an employee's Windows 7 workstation. I get a new hard drive and install a fresh copy of Windows 7 Pro. Inside of SCCM I have created Automatic Deployment Rules to push Windows Updates the day after patch Tuesday
(based on Niall's guide located here:
http://www.windows-noob.com/forums/index.php?/topic/6799-using-system-center-2012-configuration-manager-part-9-deploying-monthly-updates/). The "Date Released or Revised" is set to "Last 1 week."
Does this mean:
The workstation getting the new hard drive will not get any updates that came out
before the most recent patch Tuesday?
Do I need to create a "Software Update Group" with all available
Windows 7 updates for situations like this? If so, how do I get around the 1000 update limit?
Something else I am confused about with deploying monthly Windows updates via Automatic Deployment Rules...... Can I just "set it and forget it" so to speak? Or do I need to
create a new folder every month to store that month's updates? I read Gerry Hampson's guide to this (about 1/3 of the way down in the section titled:
3. Updates Infrastructure and deploying updates)
http://www.gerryhampsoncm.blogspot.ie/2013/04/sccm-2012-sp1-step-by-step-guide-part.html
Hope that makes sense. Thank you in advance for any help!

Thanks for the quick replies. I should note that we do have a base image that we use when setting up new workstations. I was just using my "fresh Windows 7 Pro" as a worst-case scenario (in case other people were reading this thread with the
same questions).
Here is how I have it setup now:
Created an "updates" folder on my SCCM server and shared it. Created sub-folders (Win7, Win8, WinServer2008, etc...)
In SCCM console, went to Administration --> Sites --> Configure Site Components --> SUP
         A. Sync Settings = Synchronize from Microsoft Update
         B. Classifications = Critical, Definition, and Security Updates
         C. Products = Forefront EP 2010, Win7, Win8, WinServer2008
         D. Sync Schedule = Every day at 6:00 PM
         E. Supersedence Rule = Months to wait = 1
Software Library --> All Software Updates --> Right-click & Synchronize Software Updates
Automatic Deployment Rules (using Windows Server 2003 as my example)
Create new software update group
Last 1 week / Product = Windows Server 2003
Occurs the Second Tuesday of every 1 months effective 8:00 PM
Software available time = 4 Hours    /   Installation
deadline = 3 Days
User Experience I have check marks for "Software Installation," "System restart (if necessary)," and suppress restarts for "Servers"
Jason-
Thanks for clarifying that ADR's do not deploy updates. What actually
does deploy the updates? And how could I manually push updates for a newly imaged workstation if I needed to?
Also, would you all suggest that my Installation Deadline for servers be more like
30 days?
Thanks again for all of the help.

How can I get rid of a windows update deployment package?

We are using SCCM 2007 with a primary site server and four child sites.
I created a windows update list with a source directory and package.
Distributed the package to my primary site server and then from a child site distributed to a long list of distribution points on the child site and three other child sites below it.
This all worked fine we used the list and package to deploy security updates and added to the list each month, automatically distributing to all sites and distribution points.
One month the distribution failed on one child site, all the other sites and distribution points got the refreshed package no problem. (Probably caused by the backup running on that site.)
This became a permanent problem which we finally fixed by creating a new list and package.
Now I'm trying to do a cleanup of the old package and partially failed distribution.
I've started by deleting the package from the primary sites distribution point.
Next from the child site where the package status is unlocked, I deleted from all the other distribution points.
The child site shows that the package distribution points have been deleted.
Unfortunately above and below the child site the package distribution points are still listed and locked.
(Looking at one of the listed distrubution points the package is on the server.)
Sorry for the big speech, does anyone know how to remove from the other distribution points and so be able to delete the package?
Any help or redirection would be great.

I don't have an answer, but I sure do have a question!!
I acquired the hacker in January. In February both of my computers were destroyed. I removed ALL forms of networking from my house -- TWC, all of my routers and adapters, etc.
I went to Best Buy and bought a new computer, then another, then 2 more -- all getting hit with a prefab image upon getting close to my doorway.
I am losing my home, etc, because I haven't been able to work in months. This hacker finds me at the library, and wherever else I try to work, and he messes withmy typing, stalls my screen, empties my USBs.
I believe I am the victim of remote deployment, but how do I find where/who it is coming from?
I used my (corrupt) Gateway recovery disks the other day and watched how ActiveX and other rd tools were listed.
PLEASE, this has been going on for too long. After i gave up on computers, my house has been entered nearly every day. The police literally think I am insane.
What can I do to get out of this deployment?
Might there be a network in my home that I am unaware of?? If so, is it likely in the cable, the tv, the fire alarm, what?
Warm regards,
Angel
None
None

Offline install of Windows 7 SP1 not recognised by Windows Update

Hi
I have asked this question over at the Windows Community forum, and someone suggested that I ask here.
This question regards Windows 7 and Service pack 1
I bought a couple of new computers, and decided to use the offline SP1 installation on each to get the computers up to date when I first configured them.
So I downloaded the offline update iso from Microsoft, created a DVD and installed SP1.
After configuring my computer, I then connected windows update to get all fixes etc since SP1.
To my dismay windows update has presented me with a list of *all* updates, including SP1.
Is there any way of getting Windows update to recognise the fact that I already have SP1 installed?
Further info:
This is the procedure I went through.
1) Built the computers
2) Installed Windows 7
3) Installed hardware device drivers
4) Installed SP1 from DVD
5) Connected to the internet
6) Activated Windows
7) Used Windows Update
8) Installed the fix/patch required for windows update to work
9) re-connected to windows update
10) Was dismayed at the list of fixes requiring download. (around 148)
After going through the process of downloading the updates, at around the time of the second re-boot, the list of updates included Service Pack 1.
AV Software was going to be the next thing to install, after the computer was *fully* patched
Further Further informatio :)
I have since gone ahead and installed Windows on my second computer.
I'm still interested in finding a solution for future reference.
After installing Windows7 and applying the offline SP1 update, I checked to see what updates were installed before
activation and connecting to windows update.
These are the updates listed.
1) Service Pack 1 for Windows 7 (KB976902)
2) Update for MS Windows (KB976902)
3) User Mode Driver framework V1.11 (KB2685813)
4) KB958488 (the list just haqd the kb number, no title)
5) Hot Fix for Windows (KB2505454)
My original question, and the answers/feedback can be viewed at the following page:
http://answers.microsoft.com/en-us/windows/forum/windows_7-windows_update/offline-install-of-windows-7-sp1-not-recognised-by/e8ab61d0-8669-4297-acfd-4acc0da8c1dc?rtAction=1427893878897
Cheers...
Daz

Hi Daz,
You mentioned that the SP1 prompted again in the needed updates, I suspect that that is not the full service pack, it is only some changes to existing non-security content, appropriate 10 MB size. you can check the size of the update to confirm
this.
See more information in this link
http://support.microsoft.com/en-us/kb/894199
And after you have manually installed the updates offline, have you checked whether these updates are listed in the "installed updates", or in Update history? And you can check the new detected updates, whether they have been successfully installed
in your system. Meanwhile, when you check for updates online, please check your Windows Update settings, we recommend you to check for important updates, not optional updates or hotfix. You can install the optional update or hotfix when you need it in the
future.
Regards
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Machine deployed from Windows 8.1 media with Update slipstreamed prompting for installation of KB2919355

I'm preparing a "Windows 8.1 Update" OS deployment in SCCM and have encountered an issue.
Here's what I did:
Downloaded SW_DVD9_SA_Win_Ent_8.1_64BIT_English_-2_MLF_X19-49847.ISO from the Volume Licensing site
Extracted install.wim from the ISO
Mounted the WIM with DISM to add the KB2959977 package (as directed
here, using
these instructions)
Deployed the image with SCCM
After imaging a VM and booting it, I went into Windows Update and was prompted to install "Windows 8.1 Update for x64-based Systems (KB2919355)". It is my understanding the media I used should have the Windows 8.1 Update integrated into it. Can
anyone explain why Windows Update is offering this update to be installed?
Edit: Here's the output of "dism /image:mount /Get-Packages" ran against the WIM which confirms the KB2919355 package is applied to the WIM:
Deployment Image Servicing and Management tool
Version: 6.3.9600.16384
Image Version: 6.3.9600.17031
Packages listing:
Package Identity : Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~en-US~6.3.9600.16384
State : Installed
Release Type : Language Pack
Install Time : 18/03/2014 9:30 AM
Package Identity : Microsoft-Windows-Foundation-Package~31bf3856ad364e35~amd64~~6.3.9600.16384
State : Installed
Release Type : Foundation
Install Time : 22/08/2013 2:46 PM
Package Identity : Microsoft-Windows-Security-SPP-Component-SKU-Enterprise-GVLK-Package~31bf3856ad364e35~amd64~~6.3.9600.16384
State : Installed
Release Type : Feature Pack
Install Time : 18/03/2014 9:51 AM
Package Identity : Package_for_KB2919355~31bf3856ad364e35~amd64~~6.3.1.14
State : Installed
Release Type : Update
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2919442~31bf3856ad364e35~amd64~~6.3.1.8
State : Installed
Release Type : Update
Install Time : 18/03/2014 9:55 AM
Package Identity : Package_for_KB2932046~31bf3856ad364e35~amd64~~6.3.1.5
State : Installed
Release Type : Feature Pack
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2937220~31bf3856ad364e35~amd64~~6.3.1.0
State : Installed
Release Type : Update
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2937592~31bf3856ad364e35~amd64~~6.3.1.0
State : Installed
Release Type : Feature Pack
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2938439~31bf3856ad364e35~amd64~~6.3.1.0
State : Installed
Release Type : Feature Pack
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2938772~31bf3856ad364e35~amd64~~6.3.1.0
State : Installed
Release Type : Update
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2939471~31bf3856ad364e35~amd64~~6.3.1.0
State : Installed
Release Type : Update
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2949621~31bf3856ad364e35~amd64~~6.3.2.0
State : Installed
Release Type : Hotfix
Install Time : 18/03/2014 10:20 AM
Package Identity : Package_for_KB2959977~31bf3856ad364e35~amd64~~6.3.1.1
State : Installed
Release Type : Update
Install Time : 16/04/2014 11:19 PM
The operation completed successfully.

This is explained in this KB article, where it states:
The MSDN and VLSC updated ISOs do not contain the complete set of fixes that are offered from Windows Update. Therefore, Windows Update and WSUS will offer the KB2919355 update again to computers that are deployed by using the images in these ISOs. This
is expected and does not result in the full reinstallation of the Windows 8.1 Update but only one smaller component of it. The rest of the update will not be downloaded or reinstalled.
Hope this helps,
David
Windows Outreach Team - IT Pro
The Springboard Series on TechNet

Having issues deploying Windows updates

System Center 2012 Config Manager - 5.0.7804.1000 running on Win Server 2008 R2 SP1
Approx 75 servers (Mix of Server 2003, 08 and 12) and 60 workstations (All Win 7 x64)
I took over managing my companys SCCM 2012 a few months ago. I have System Center 2012 Endpoint running from here for all clients with an auto-update rule to update AV signatures. All seems well with AV - I see updates being installed and custom AV profiles
being applied to each respective machine.
I've been struggling with getting Windows updates deployed. I followed guides at windows noob and others, but I'm definitely missing something.
I was trying to deploy like this: Filter updates and select ones I need (For example, my Win 7 clients - All Win 7 updates except IE 10 or 11, all Office 2010 updates, and MS Silverlight updates) From there I create a deployment package, and then deploy to
my Win 7 device collection. (We run custom apps that require IE 9, and cant upgrade IE version yet)
In that collection I have maintenance windows for every weeknight 6pm-7am, and of Saturday and Sunday. I don't use the UTC time as indicated in some of the guides, I need it to run on EST (I did try it with UTC, but did not notice a change)
I can browse to the UNC share with the updates in there and see nightly syncs with Microsoft.
Under Monitoring - System Status - Site status I see OK under all components, same with component status.
I have GPO pointing to the SCCM server with the correct port. Like I said, AV updates are being pushed out but for some reason Windows updates are not being installed. When I look at the properties of my machine for example, I see under deployments
all of my updates along with AV signatures.
Any help is greatly appreciated. Please let me know what logs or additional info are needed.
Thanks,
Jeff

Not sure what guide says that but it sounds like they are mis-interpreting what's going on. On the back-end, ConfigMgr almost always uses UTC, it's easier than always having to convert everything. But for humans, it's not easier. Also, if you're a global
enterprise, do you really want everything happening across the globe at the same time?
As for your reboots, I don't know what rebooted them -- it could have been the WUA or your MW which may have been misconfigured. I can't say what's going on other than I know it works well because I've done it for many customers in production. There are
some bugs and flukes will happen though.
My best advice at this point is to bring in someone who can sit and examine what's going on first hand (it's very difficult to do this in the forums) or open a case with CSS.
Jason | http://blog.configmgrftw.com

Windows Update Agent rebooting systems after Software Update deployment

I have a software update deployment that is configured to install software updates on a collection of servers at 4:00 AM with a suppressed reboot. The updates get deployed and no reboot occurs as expected. Then ~8 hours later WUA starts up and the
servers get rebooted.
There is a maintenance window applied to the collection from 4:00 AM to 6:00 AM to allow the updates to install.
I've read a few forum and blog posts on this issue and have implemented some settings via GPO, but the reboots are still occurring. The settings that were applied are referenced in the link below.
https://support.microsoft.com/kb/2476479?wa=wsignin1.0
Here is a snippet from the WindowsUpdate.log:
2014-10-22 12:00:26:153 1428 8a88 AU Received AU Resume timeout
2014-10-22 12:00:26:153 1428 8a88 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-install notify} added to AU services list
2014-10-22 12:00:26:153 1428 8a88 AU Can not perform non-interactive scan if AU is interactive-only
2014-10-22 12:02:08:512 1428 8a88 AU AU received policy change subscription event
2014-10-22 12:16:43:463 1428 8a88 AU ########### AU: Uninitializing Automatic Updates ###########
2014-10-22 12:16:43:479 1428 8a88 WuTask Uninit WU Task Manager
2014-10-22 12:16:43:697 1428 8a88 Service *********
2014-10-22 12:16:43:697 1428 8a88 Service ** END ** Service: Service exit [Exit code = 0x240001]
2014-10-22 12:16:43:697 1428 8a88 Service *************
2014-10-22 12:19:29:728 1428 e584 Misc =========== Logging initialized (build: 7.8.9200.16604, tz: -0400) ===========
2014-10-22 12:19:29:728 1428 e584 Misc   = Process: C:\WINDOWS\system32\svchost.exe
2014-10-22 12:19:29:728 1428 e584 Misc   = Module: c:\windows\system32\wuaueng.dll
2014-10-22 12:19:29:728 1428 e584 Service *************
2014-10-22 12:19:29:728 1428 e584 Service ** START ** Service: Service startup
2014-10-22 12:19:29:728 1428 e584 Service *********
2014-10-22 12:19:29:744 1428 e584 Agent   * WU client version 7.8.9200.16604
2014-10-22 12:19:29:744 1428 e584 Agent   * Base directory: C:\WINDOWS\SoftwareDistribution
2014-10-22 12:19:29:744 1428 e584 Agent   * Access type: No proxy
2014-10-22 12:19:29:744 1428 e584 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 2.
2014-10-22 12:19:29:744 1428 e584 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 2.
2014-10-22 12:19:29:744 1428 e584 Agent   * Network state: Connected
2014-10-22 12:19:29:744 1428 e584 Service UpdateNetworkState Ipv6, cNetworkInterfaces = 2.
2014-10-22 12:19:29:744 1428 e584 Service UpdateNetworkState Ipv4, cNetworkInterfaces = 2.
2014-10-22 12:19:29:791 1428 e584 Agent *********** Agent: Initializing global settings cache ***********
2014-10-22 12:19:29:791 1428 e584 Agent   * Endpoint Provider: 00000000-0000-0000-0000-000000000000
2014-10-22 12:19:29:791 1428 e584 Agent   * WSUS server:
http://Internal-WSUS.Domain:8530
2014-10-22 12:19:29:791 1428 e584 Agent   * WSUS status server:
http://Internal-WSUS.Domain:8530
2014-10-22 12:19:29:791 1428 e584 Agent   * Target group: (Unassigned Computers)
2014-10-22 12:19:29:791 1428 e584 Agent   * Windows Update access disabled: No
2014-10-22 12:19:29:791 1428 e584 Misc WARNING: Network Cost is assumed to be not supported as something failed with trying to get handles to wcmapi.dll
2014-10-22 12:19:29:806 1428 e584 WuTask WuTaskManager delay initialize completed successfully..
2014-10-22 12:19:29:822 1428 e584 Report CWERReporter::Init succeeded
2014-10-22 12:19:29:822 1428 e584 Agent *********** Agent: Initializing Windows Update Agent ***********
2014-10-22 12:19:29:822 1428 e584 DnldMgr Download manager restoring 0 downloads
2014-10-22 12:19:29:838 1428 e584 AU ########### AU: Initializing Automatic Updates ###########
2014-10-22 12:19:29:838 1428 e584 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-install notify} added to AU services list
2014-10-22 12:19:29:838 1428 e584 AU AIR Mode is disabled
2014-10-22 12:19:29:838 1428 e584 AU   # Policy Driven Provider:
http://Internal-WSUS.Domain:8530
2014-10-22 12:19:29:838 1428 e584 AU   # Detection frequency: 22
2014-10-22 12:19:29:838 1428 e584 AU   # Approval type: Disabled (User preference)
2014-10-22 12:19:29:838 1428 e584 AU   # Auto-install minor updates: No (User preference)
2014-10-22 12:19:29:838 1428 e584 AU   # ServiceTypeDefault: Service 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 Approval type: (Pre-install notify)
2014-10-22 12:19:29:838 1428 e584 AU   # Will interact with non-admins (Non-admins are elevated (User preference))
2014-10-22 12:19:29:838 1428 e584 AU WARNING: Failed to get Wu Exemption info from NLM, assuming not exempt, error = 0x80240037
2014-10-22 12:19:29:853 1428 e584 AU AU finished delayed initialization
2014-10-22 12:19:29:884 1428 e584 AU #############
2014-10-22 12:19:29:884 1428 e584 AU ## START ## AU: Search for updates
2014-10-22 12:19:29:884 1428 e584 AU #########
2014-10-22 12:19:29:884 1428 e584 Agent SkipSelfUpdateCheck search flag set for serverId: 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782
2014-10-22 12:19:30:416 1428 e584 Report *********** Report: Initializing static reporting data ***********
2014-10-22 12:19:30:416 1428 e584 Report   * OS Version = 6.2.9200.0.0.197008
2014-10-22 12:19:30:416 1428 e584 Report   * OS Product Type = 0x00000008
2014-10-22 12:19:30:416 1428 e584 Report   * Computer Brand = HP
2014-10-22 12:19:30:416 1428 e584 Report   * Computer Model = ProLiant BL460c Gen8
2014-10-22 12:19:30:416 1428 e584 Report   * Platform Role = 1
2014-10-22 12:19:30:416 1428 e584 Report   * AlwaysOn/AlwaysConnected (AOAC) = 0
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Revision = I31
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Name = Default System BIOS
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Release Date = 2014-02-10T00:00:00
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Sku Number = 641016-B21
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Vendor = HP
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Family = ProLiant
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Major Release = 255
2014-10-22 12:19:30:431 1428 e584 Report   * Bios Minor Release = 255
2014-10-22 12:19:30:431 1428 e584 Report   * Locale ID = 1033
2014-10-22 12:19:30:431 1428 e584 AU <<## SUBMITTED ## AU: Search for updates [CallId = {2787252C-D4B8-46B5-BB42-0C616042113C} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:30:431 1428 dae0 Agent *************
2014-10-22 12:19:30:431 1428 dae0 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-22 12:19:30:431 1428 dae0 Agent *********
2014-10-22 12:19:30:431 1428 dae0 Agent   * Online = No; Ignore download priority = No
2014-10-22 12:19:30:431 1428 dae0 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1
or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-10-22 12:19:30:431 1428 dae0 Agent   * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
2014-10-22 12:19:30:431 1428 dae0 Agent   * Search Scope = {Machine & All Users}
2014-10-22 12:19:30:431 1428 dae0 Agent   * Caller SID for Applicability: S-1-5-18
2014-10-22 12:19:30:494 1428 dae0 Agent   * Found 0 updates and 0 categories in search; evaluated appl. rules of 0 out of 0 deployed entities
2014-10-22 12:19:30:494 1428 dae0 Agent *********
2014-10-22 12:19:30:494 1428 dae0 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-22 12:19:30:494 1428 dae0 Agent *************
2014-10-22 12:19:30:509 1428 d158 AU >>## RESUMED ## AU: Search for updates [CallId = {2787252C-D4B8-46B5-BB42-0C616042113C} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:30:509 1428 d158 AU   # 0 updates detected
2014-10-22 12:19:30:509 1428 d158 AU #########
2014-10-22 12:19:30:509 1428 d158 AU ## END ## AU: Search for updates [CallId = {2787252C-D4B8-46B5-BB42-0C616042113C} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:30:509 1428 d158 AU #############
2014-10-22 12:19:30:509 1428 d158 AU All AU searches complete.
2014-10-22 12:19:30:525 1428 e584 AU #############
2014-10-22 12:19:30:525 1428 e584 AU ## START ## AU: Search for updates
2014-10-22 12:19:30:525 1428 e584 AU #########
2014-10-22 12:19:30:525 1428 e584 AU Additional Service {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} with Approval type {Pre-install notify} added to AU services list
2014-10-22 12:19:30:525 1428 e584 Agent SkipSelfUpdateCheck search flag set for serverId: 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782
2014-10-22 12:19:30:525 1428 e584 AU <<## SUBMITTED ## AU: Search for updates [CallId = {A3E41A4C-E9CB-4172-B6B0-99D556FB9102} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:30:525 1428 dae0 Agent *************
2014-10-22 12:19:30:525 1428 dae0 Agent ** START ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-22 12:19:30:525 1428 dae0 Agent *********
2014-10-22 12:19:30:525 1428 dae0 Agent   * Online = Yes; Ignore download priority = No
2014-10-22 12:19:30:525 1428 dae0 Agent   * Criteria = "IsInstalled=0 and DeploymentAction='Installation' or IsPresent=1 and DeploymentAction='Uninstallation' or IsInstalled=1 and DeploymentAction='Installation' and RebootRequired=1
or IsInstalled=0 and DeploymentAction='Uninstallation' and RebootRequired=1"
2014-10-22 12:19:30:525 1428 dae0 Agent   * ServiceID = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782} Third party service
2014-10-22 12:19:30:525 1428 dae0 Agent   * Search Scope = {Machine & All Users}
2014-10-22 12:19:30:525 1428 dae0 Agent   * Caller SID for Applicability: S-1-5-18
2014-10-22 12:19:30:525 1428 dae0 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\WuRedir\9482F4B4-E343-43B6-B170-9A65BC822C77\wuredir.cab:
2014-10-22 12:19:30:541 1428 dae0 Misc Microsoft signed: Yes
2014-10-22 12:19:30:541 1428 dae0 Misc Infrastructure signed: Yes
2014-10-22 12:19:30:556 1428 dae0 EP Got 9482F4B4-E343-43B6-B170-9A65BC822C77 redir SecondaryServiceAuth URL: "http://fe2.ws.microsoft.com/w81/2/redir/v2-storeauth.cab"
2014-10-22 12:19:30:588 1428 dae0 Agent Checking for updated auth cab for service 117cab2d-82b1-4b5a-a08c-4d62dbee7782 at
http://fe2.ws.microsoft.com/w81/2/redir/v2-storeauth.cab
2014-10-22 12:19:30:588 1428 dae0 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\117cab2d-82b1-4b5a-a08c-4d62dbee7782.cab:
2014-10-22 12:19:30:603 1428 dae0 Misc Microsoft signed: Yes
2014-10-22 12:19:30:603 1428 dae0 Misc Infrastructure signed: Yes
2014-10-22 12:19:30:775 1428 dae0 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\AuthCabs\Downloaded\117cab2d-82b1-4b5a-a08c-4d62dbee7782.cab:
2014-10-22 12:19:30:791 1428 dae0 Misc Microsoft signed: Yes
2014-10-22 12:19:30:791 1428 dae0 Misc Infrastructure signed: Yes
2014-10-22 12:19:30:791 1428 dae0 Misc Validating signature for C:\WINDOWS\SoftwareDistribution\WuRedir\117CAB2D-82B1-4B5A-A08C-4D62DBEE7782\wuredir.cab:
2014-10-22 12:19:30:806 1428 dae0 Misc Microsoft signed: Yes
2014-10-22 12:19:30:806 1428 dae0 Misc Infrastructure signed: Yes
2014-10-22 12:19:30:822 1428 dae0 EP Got 117CAB2D-82B1-4B5A-A08C-4D62DBEE7782 redir Client/Server URL: "https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx"
2014-10-22 12:19:30:978 1428 dae0 PT +++++++++++ PT: Synchronizing server updates +++++++++++
2014-10-22 12:19:30:978 1428 dae0 PT   + ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}, Server URL =
https://fe2.ws.microsoft.com/v6/ClientWebService/client.asmx
2014-10-22 12:19:31:025 1428 dae0 Agent   * Found 0 updates and 0 categories in search; evaluated appl. rules of 0 out of 0 deployed entities
2014-10-22 12:19:31:025 1428 dae0 Agent *********
2014-10-22 12:19:31:025 1428 dae0 Agent ** END ** Agent: Finding updates [CallerId = AutomaticUpdates]
2014-10-22 12:19:31:025 1428 dae0 Agent *************
2014-10-22 12:19:31:025 1428 d158 AU >>## RESUMED ## AU: Search for updates [CallId = {A3E41A4C-E9CB-4172-B6B0-99D556FB9102} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:31:025 1428 d158 AU   # 0 updates detected
2014-10-22 12:19:31:025 1428 d158 AU #########
2014-10-22 12:19:31:025 1428 d158 AU ## END ## AU: Search for updates [CallId = {A3E41A4C-E9CB-4172-B6B0-99D556FB9102} ServiceId = {117CAB2D-82B1-4B5A-A08C-4D62DBEE7782}]
2014-10-22 12:19:31:025 1428 d158 AU #############
2014-10-22 12:19:31:025 1428 d158 AU All AU searches complete.
2014-10-22 12:19:31:025 1428 d158 AU AU setting next detection timeout to 2014-10-23 14:19:28
2014-10-22 12:19:36:025 1428 e214 Report REPORT EVENT: {E04012FD-8FFD-4259-96D5-A5A34127F0A0} 2014-10-22 12:19:31:025-0400 1 147 [AGENT_DETECTION_FINISHED] 101 {00000000-0000-0000-0000-000000000000} 0 0 AutomaticUpdates Success Software
Synchronization Windows Update Client successfully detected 0 updates.
2014-10-22 12:19:36:025 1428 e214 Report CWERReporter finishing event handling. (00000000)
2014-10-22 12:29:29:914 1428 e584 AU AU invoking RebootSystem (OnRebootNow)
2014-10-22 12:29:30:055 1428 e584 AU Allowing auto firmware installs at next shutdown
2014-10-22 12:29:30:102 1428 e584 Misc WARNING: SUS Client is rebooting system.
2014-10-22 12:29:30:102 1428 e584 AU AU invoking RebootSystem (OnRebootRetry)
2014-10-22 12:29:30:367 1428 e584 Shutdwn Checking to see whether install at shutdown is appropriate
2014-10-22 12:29:30:367 1428 e584 Shutdwn user declined update at shutdown
2014-10-22 12:29:30:367 1428 e584 AU AU initiates service shutdown
2014-10-22 12:29:30:367 1428 e584 AU ########### AU: Uninitializing Automatic Updates ###########
2014-10-22 12:29:30:399 1428 e584 WuTask Uninit WU Task Manager
2014-10-22 12:29:30:445 1428 e584 Agent Sending shutdown notification to client
2014-10-22 12:29:30:445 5788 8084 COMAPI WARNING: Received service shutdown/self-update notification.
2014-10-22 12:29:30:461 1428 e584 Report CWERReporter finishing event handling. (00000000)
2014-10-22 12:29:30:539 1428 e584 Service *********
2014-10-22 12:29:30:539 1428 e584 Service ** END ** Service: Service exit [Exit code = 0x240001]
2014-10-22 12:29:30:539 1428 e584 Service *************
Any assistance is appreciated.
-Tim

Hi,
Any update?
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to get windows updates offline

Hi,all
I want to get windows updates (win7/win server2003/2008)periodically,but our stations and servers are not connected to Internet,so I must download the windows patches manually.
Could you sharing your best way to get windows updates and install offline with me? I know some tools such as MBSA ,WSUS. but I have no experience on it .thanks all of you
Lorin
Nov.7.2014

Hi Lorin,
Managing WSUS on a disconnected network involves exporting updates and metadata from a WSUS server on a connected network and then importing all that information into the WSUS server on the disconnected network.
There are three steps to accomplishing an import and export.
First, make sure advanced synchronization options for the express installation files feature and languages on the export server match the settings on the import server.
Second, copy updates from the file system of the export server to the file system of the import server.
Third, export update metadata from the database on the export server, and import it into the database on the import server.
For detailed information, please refer to the link below,
http://technet.microsoft.com/en-us/library/cc720512(v=ws.10).aspx
Best Regards.
Steven Lee
TechNet Community Support

WIndows Updates Deployment - Downloading

I have SCCM 2012 SP1. I have several templates setup, when deploying windows updates.
For Non-Critical systems, updates are downloaded and installed.
for Critical \ Business Systems, we have decided to push updates 2nd Saturday of each month. However, it possible to push updates to clients, stating that Updates are Available, but not downloaded or installed ? this
way, the owner of the system can look in Software Center, and see what updates are available and manually download and installed approved updates ?
Thank you for you time...

Hi,
If you deploy the software updates as "available" instead of "required" then the updates are available in the Software Center for selection and manual deployment instead of automatically install the updates.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Trouble Deploying Windows updates via SCCM 2012

Hello
I'm testing Windows updates via SCCM 2012 - I have successfully deployed updates to 4 test PC's.
I then added another 15 Test PC's into the same group - Not one of them receive updates (they're all within the same Domain and even in the same room)
I reviewed "UpdatesDeployment.log -
1. I highlighted some points that stood out to me
2. I have the Maintenance window set to 24hours for this test
From the Server side and Clients side - What are the best .logs to look at.
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Suspend activity in presentation mode is selected   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Proceeding to non-business hours activites as presentation mode is off.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Attempting to install 0 updates   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
No actionable updates for install task. No attempt required.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)
Updates could not be installed at this time. Waiting for the next maintenance window.   UpdatesDeploymentAgent   22/08/2014 10:00:00 PM   4604 (0x11FC)

Hi,
You could also check Windowsupdate.log on the client.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Offline deployment of Windows Update

Similar Messages

Maybe you are looking for