SCCM 2012- Security updates issue

We are unable to find MS13-053 bulletin ID in our SCCM 2012 meta data list while we have already selected Critical updates and Security updates in classification list for Windows 7 and Windows 8 from products list of Software update point component properties.
Please let me know if i have missed something.
Please help.
Thanks
Mohit Kumar

Hi,
That’s very strange. How about re-run synchronization? Any changes?
If MS13-053 still cannot show up, you could also
download these updates manually, then deploy them.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

SCCM 2012 software update point not sync with Microsoft Updat,

Hi
Recently my SCCM 2012 software update is not syncing with microsoft update, am getting below error. can any one suggest/help me how to resolve this issue.
WebException: The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

am just trying to tracert catalog.update.microsoft.com
from my wsus server but it is failed, would that be the reason/
Regards,
Madhan

HT5228 I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I am running OS 10.5.8 on an iMac. There is no security update issued for this operating system - it only covers 10.6. Is my comuter vulnerable? Do I need to do anything?

I'm still not clear why Apple only issued security updates for 10.6 and later. I assume they think we should all update our operating systems or maybe they are just focusing on the majority of users?
Apple has had a long standing policy of only supporting the current and previous operating system releases. Whether they decide to make an exception for even older releases is anyone's guess.
You can send them feedback to express your opinion.
Or does the new Trojan not affect older OS? I'd like to know , if anyone has information.
As far as is known, it does affect older unsupported releases. Disabling Java in your web browser is the current preventive approach (and that is a community derived approach)

SCCM 2012 SP1 update to R2

Hi!
SCCM 2012 SP1 update to R2.
I use SQL 2008R2 SP2 (10.50.4000.0), this version is Ok for SCCm 2012 R2 update?
cenubit

Yes it is.
See supported configurations
http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigSQLDBconfig
Also, see procedure to upgrade from SP1 to R2
http://www.gerryhampsoncm.blogspot.ie/2013/10/in-place-upgrade-sccm-2012-sp1-to-r2.html
Also, note that CU1 for R2 has also been released. You should apply this afterwards.
http://support.microsoft.com/kb/2938441/en-us
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

SCCM 2012 R2 Reporting issue updating SQL Reporting permissions

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

I am in the process of setting up SCCM 2012 R2. I am having an issue with the SCCM reporting. If I set the permissions in the SCCM console, the permissions do not propagate to the SQL reporting... I get this... This is from SRSRP.log...
Updating data source {5C6358F2-4BB6-4a1b-A16E-8D96795D8602} at ConfigMgr_DIT $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.384+300><thread=5432 (0x1538)>
(!) Error retrieving folders - [A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.)]. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.438+300><thread=5432 (0x1538)>
No folder configuration information found. $$<SMS_SRS_REPORTING_POINT><01-15-2015 12:00:55.441+300><thread=5432 (0x1538)>
Does anyone know how to fix?
I tried removing and re-installing the reporting point, changing the permissions in SQL Server... and a dozen other things.

SCCM 2012 Software updates

Hi All,
We have SCCM 2012 R2 Server, We have been using more than a years ,
Now im facing crazy issues .
1.every month we using sccm server for deploying windows patches .
2.before patching we set maintenance schedules for device group.
3.patch deployment is working fine without any issues and we get the success 100 % compliants report in all the server .
Note:- but after one or two months later in Monitoring-->deployment tab-->its showing only few machines success results or deploying again old package''
this process is keep on rotating in all the deployment .
how to resolve this issues.
Regards,
Velu M

Hi,
You could try to initiate Software Updates Deployment Evaluation Cycle action from a problematic client, then check CIAgent.log, StateMessage.log to see if there are any helpful information.
Reference:
SCCM state messaging–in depth:http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx
You could also follow the steps in the blog below to check state messages in WMI.
Software Update Compliance Reports – Detection State Unknown
http://blogs.technet.com/b/configmgrdogs/archive/2013/11/07/software-update-status-reports-detection-state-unknown.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 Software Updates not installing (bothh Windows patches & 3rd party updates)

Using SCCM 2012 R2, I am having a problem getting Windows updates to install. Applications published to people work, and basic software installations published to machines for a straight install work. However, both Windows patches and Adobe patches
fail to install on clients. I have imported the Adobe catalog into SCUP, and publish through WSUS. I can see the Adobe patches and Windows patches in SCCM, and can publish them. However, in deployment status out of 4 machines in my test group the Windows patches
installed on 1 and the other 3 are still in Unknown status with category of "Client check passed/Active". However, none of them are installing the patch - they don't even seem to try. All of those are Windows 7 PCs, incidentally. On Adobe patches,
one PC fails and the other 3 machines still sit in Unknown status. Certificates are distributed,
Any ideas what might cause the deployment to not push some targets, even when it's past the deadline?
Thanks,
Andy Maslin

An unknown status means that the clients are not reporting back to ConfigMgr correctly. This is often due to the WUA not pointing at the correct WSUS instance. You can verify this by examining the WUAHandler.log on one of those clients and it will clearly
indicate an issue with this which in turn is often due to a group policy overriding the ConfigMgr behavior.
Jason | http://blog.configmgrftw.com

SCCM 2012 R2 ADR issue with proxy authentication

Hi,
We're migrating SCCM 2007 to SCCM 2012 R2.
In SCCM 2007, the proxy server is configured with user authentication, and this works.
In SCCM 2012 R2, the Software Update Point is installed locally and connected with a local WSUS 4.0 (Server 2012)
We use a proxy with user authentication for Update Deployment. (This user is the same as configured in SCCM 2007.)
The Proxy Server is Blue Coat SG.
The proxy account is used for:
The Synchronization works, but Automatic Deployment Rule (ADR) doesn't work.
When an Automatic Deployment Rule is started, it tries to authenticate 3 times.
The Patchdownloader.log shows:
Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
12:19:06        3608 (0x0E18)
Connected to
\\<servername>\root\SMS        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
(0x0E18)
Trying to connect to the
\\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
12:19:06        3608 (0x0E18)
Connected to
\\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:19:06        3608
(0x0E18)
Download destination =
\\<servername.domain>\dp_wks_ms_updates$\3208bb5e-bcd9-4389-a0c9-02ef33ccb998.1\XPSEPSC-x86-en-US.exe .        Software Updates Patch Downloader        11/8/2013 12:19:07        3608
(0x0E18)
Contentsource =
http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe .        Software Updates Patch Downloader        11/8/2013
12:19:07        3608 (0x0E18)
Downloading content for ContentID = 16819067,
FileName = XPSEPSC-x86-en-US.exe.        Software Updates Patch Downloader        11/8/2013 12:19:07        3608 (0x0E18)
Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:19:07        8364
(0x20AC)
Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
12:19:07        8364 (0x20AC)
HttpSendRequest failed HTTP_STATUS_PROXY_AUTH_REQ        Software Updates Patch Downloader        11/8/2013
12:19:07        8364 (0x20AC)
Download
http://wsus.ds.www.download.windowsupdate.com/msdownload/update/v3-19990518/cabpool/xpsepsc-x86-en-us_7ae70ca1330a099080c6c41c4d5b7f19b30dc0cd.exe to C:\Windows\TEMP\CAB6FD2.tmp returns 407        Software Updates
Patch Downloader        11/8/2013 12:19:07        8364 (0x20AC)
ERROR: DownloadContentFiles() failed with hr=0x80070197        Software Updates Patch Downloader        11/8/2013
12:19:07        3608 (0x0E18)
Then the proxy user account is locked:
Trying to connect to the root\SMS namespace on the <servername> machine.        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Connected to \\ <servername>\root\SMS        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Trying to connect to the
\\<servername.domain>\root\sms\site_ECM namespace on the <servername.domain> machine.        Software Updates Patch Downloader        11/8/2013
12:20:11        3608 (0x0E18)
Connected to
\\<servername.domain>\root\sms\site_ECM        Software Updates Patch Downloader        11/8/2013 12:20:11        3608
(0x0E18)
Download destination =
\\<servername.domain>\dp_wks_ms_updates$\e0a54221-3ff2-4129-b7cf-89bf5cd1f726.1\Windows-KB943729-x86-ENU.exe .        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
Contentsource =
http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe .        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
Downloading content for ContentID = 16824262,
FileName = Windows-KB943729-x86-ENU.exe.        Software Updates Patch Downloader        11/8/2013 12:20:12        3608 (0x0E18)
Try username <domain\ProxyAccount>        Software Updates Patch Downloader        11/8/2013 12:20:12        12480
(0x30C0)
Proxy enabled proxy server <proxyserver>:8080        Software Updates Patch Downloader        11/8/2013
12:20:12        12480 (0x30C0)
HttpSendRequest failed HTTP_STATUS_FORBIDDEN or HTTP_STATUS_DENIED        Software Updates Patch Downloader        11/8/2013
12:20:12        12480 (0x30C0)
Download
http://wsus.ds.download.windowsupdate.com/msdownload/update/software/updt/2009/10/windows-kb943729-x86-enu_e174c41ce3dcbd5c8922d6d1c39df1be425a70e0.exe to C:\Windows\TEMP\CAB6E4B.tmp returns 403        Software Updates
Patch Downloader        11/8/2013 12:20:12        12480 (0x30C0)
ERROR: DownloadContentFiles() failed with hr=0x80070193        Software Updates Patch Downloader        11/8/2013
12:20:12        3608 (0x0E18)
The RuleEngine.log shows:
Failed to download the update from internet. Error = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
Failed to download ContentID 16824467 for UpdateID 16819978. Error code = 403 SMS_RULE_ENGINE 11/8/2013 16:18:25 3608 (0x0E18)
It seems that the ADR uses a wrong password when authenticating with the proxy, but this same user works when synchronizing with WSUS.
We performed the following actions with no result:
run the ADR manually and automatic,
reinstalled WSUS and SUP,
changed proxy user account.
Regards,
Matthias

Currently, the command shows:
Current WinHTTP proxy settings:
    Direct access (no proxy server).
We've been testing with:
upddwnldcfg.exe /s:<proxyserver>:<port> /u:<user> /allusers
psexec -i -s iexplore.exe, set Internet Explorer proxy manually
All with same result, proxy user getting locked when ADR runs.
(These settings have been removed after the test.)
I think dekac99 would suggest netsh winhttp set proxy or import proxy.
then turn off proxy use on the role SUP (this way not SCCM will send auth but all winhttp will use proxy)
the problems with that for me are:
- if MS implemented role-based proxy usage, why set at http layer - of course this might work as a workaround for the time being so it might be a good idea but I'm just not sure what unwanted issues it may cause
- the other thing is where I'm not sure, with set proxy you cannot define authentication account. if you use import from IE and the IE prompted for proxy auth, the stored credential will be used on winhttp layer (though I'm not 100% sure of that) - so this
is just too uncontrolled for me
- upddwnldcfg.exe will need to run in the name of system account (it stores credentials under HKCU so far I know it will be a per user based setting)
--> what confuses me, the catalog synch works which should use the same configured proxy and account(?), only ADR does not work. shouldn't they both use the same process for sending account auth info?

SCCM 2012 Security to allow users to add resource to a collection

Hi,
I need to permission IT Support staff so they are able to add computers to certain collections in SCCM 2012. I created a new Role and assigned the following permissions under "Collection"
Read, Modify, Modify Resource, delete resource, read resource, Modify Collection setting, read AMT.
Also allowed read at site level.
Users are still unable to add computers to a collection ? Any ideas why ?
I did read a previous post which said something about also having to permission users to the limiting collection but this doesnt make sense, and sounds insecure.
Thanks

Here is a solution that should work for you. Perform this on a test account with only the security role you are going to change for your users in question.
Create a new collection that is a copy of your collection limiting collection mentioned above.
Set the limiting collection of this new collection to something other than the limiting collection it defaults to, which is the copied collection.
Select the collections to which you wish to grant Add Resource permissions to and set their limiting collection to this new collection.
Within your Administrative user or group properties, specify this new limiting collection and the collections you wish to allow Add Resource permissions under the "Associate assigned security roles with specific security scopes and collections - don't forget
to add your security scope.
Apply the changes and test - don't forget to restart the console of your test account.
This does a couple things - it allows the Add Resource function to the specific collections you wish for the specific Administrative user/group you wish. It does NOT allow modify on the limiting collection. And it separates the specific collections
you tag as being modifiable by the specified group.
We had the same issue in our environment - need a specific group to be able to Add Resource to a single specific collection which was being limited by the All Workstations collection. Allowing modify to the All Workstations collection allowed modifications
to any collection limited by All Workstations. So I came up with the solution above, tested against my test accounts and it works as I needed.
Hopefully this will solve your issue and give you some options going forward.

Is there a consensus on how to solve security update issues?

hi,
i'm writing to you from a PPC G4 (AGP graphics) that will self-destruct by the time i switch off and (attempt) to re-start tomorrow. i will then need to do a re-install, just to see if i have gotten any replies (grinds teeth to the root). it will probably be my 8 th re-install in the past month. i just can'st takes no mores, Cap'n
<exasperation>deep breath... each time i have done a clean install, zero-ed all data when erasing (7 times over, on this occasion), repaired permissions before and after each software update, and followed every advice i could find via google to pre-empt another "Error: underlying task reported failure on exit" and the inevitable hanging grey screen; i have earned nothing but another Disk Utility report of the same problem. my HD seems to be OK - Disk Utility and Disk Warrior both say it's "verified" by SMART (although i've read this could be no assurance...). it's 40 GB, nothing else installed but NetBarrier; nothing saved on it (just 3GB of OS).
i've searched this forum over the last weekend and come across a diverse range of methods in resolving software update issues. i have tried downloading the security update and safari 3.2 directly from the site and bypassing Software Update- to no avail (but noticed that they are quite larger in MB than via Software Update??).
the one suggestion the intrigued me was installing the update via Terminal. why would this be any different? the worst thing about this is that there is no universal way that'll work for all, just individual solutions for different macs??? could my problem be exacerbated by using the double layer (double the permissions to fix?) of a Panther OS with Tiger Upgrade disk?
when i last tried to resolve the "error" with safe mode, fsck and DU Repair Disk/Permissions, which initially failed, i resorted to Disk Warrior, which re-built the directory, and "fixed" the HD. when i re-tried fsck it said the HD was "ok", but i still had the "error: underlying task..." on DU?
is there an issue with the Security Update oo8 because it's PRIMARILY for 10.5 and not Tiger? why have some encountered this problem and others escaped any seeming conflicts ? is this problem also caused by JAVA updates (there are, after all, 4 updates!)
more importantly, WHAT CAN I DOOOOOOOO?
thank you

looking at your suggestion to check /Library/Startup items in the concurrent thread ("Help needed after installing Security Update 2008-008"), i recalled that the only thing i have in this file system is 3 folders concerning Intego, NetBarrier and Virus Barrier. one of these contains the NetBarrier x4 daemon which has no image, just the apple "pencil, ruler, pen on paper" "A" image. i don't think it correctly downloaded, but this the case in every instance.
i'm running netbarrier x4 10.4.5 updated and downloaded on installation. intego Support says that there should be nothing in my "Startup/Login items". i thought they meant Login items (users>login items) because when i take the folders out of my "/Library/Startup items", NetBarrier fails to "initialize".
intego is now on newtbarrier x5, but they say x4 is fully compatible with Tiger???
my baby maybe getting on, but it's strong enough, i just need to know what's bugging it!

HT1222 MacOSX v10.6.8 mail and security update issues - help?

in the system profiler, my mail app is showing as v4.5 but has the application name Mail 3.6
Not sure if that matters but I read to reinstall updcombo and security update but when installing the security update I get:
security update 2012-004 can't be installed on this disk. This volume does not meet the requirements
Help?

this is where the install stops

SCCM 2012 R2 - Updates not installing

Hi all,
I have a SCCM 2012 R2 setup at a customer which has problems with distributing updates to the Windows 7 computers in the environment. The update group (with updates that are 100% sure required) is deployed to some test computers but the updates don't get
installed. It is also configured to be able to install the updates without looking at any maintenance windows. I see in the reporting that the updates are required, so in my opinion they should get installed.
I've checked the registry and the Windows Updates registry keys are pointing towards the right server (my SCCM primary site server). I've created a new software update group with fewer updates, same problem.
What I find in the UpdatesDeployment.log on one of the test machines is rather strange:
Assignment {8209BD9C-A86C-460B-99B3-CD6364F8BD1B} has total CI = 2
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment ({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) reconnected to the existing job ({779CA9E2-ABB8-43E1-B8AE-F4A94BA8C761}) successfully.
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment {c076f100-c2f7-43f9-a3f9-51fd33872b94} has total CI = 216
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment ({c076f100-c2f7-43f9-a3f9-51fd33872b94}) reconnected to the existing job ({A9758363-1871-4BD9-86D9-1BE0D82531AE}) successfully.
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
OnPolicyModify for assignment ({8209BD9C-A86C-460B-99B3-CD6364F8BD1B})...
UpdatesDeploymentAgent 29/09/2014 15:23:18
2740 (0x0AB4)
Work in progress for assignment {8209BD9C-A86C-460B-99B3-CD6364F8BD1B}, forced trigger (TriggerEnforce) will be attempted when done
UpdatesDeploymentAgent 29/09/2014 15:23:18
2740 (0x0AB4)
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0
UpdatesDeploymentAgent 29/09/2014 15:30:32
4532 (0x11B4)
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0
UpdatesDeploymentAgent 29/09/2014 15:30:32
4000 (0x0FA0)
Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>'
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Removing scan history to force non cached results
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Assignment({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Assignment({c076f100-c2f7-43f9-a3f9-51fd33872b94}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Evaluation initiated for (0) assignments. UpdatesDeploymentAgent
29/09/2014 15:46:47 4836 (0x12E4)
Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>True</UseCachedResults></SoftwareUpdatesMessage>'
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Assignment({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Assignment({c076f100-c2f7-43f9-a3f9-51fd33872b94}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Evaluation initiated for (0) assignments. UpdatesDeploymentAgent
29/09/2014 17:06:31 6032 (0x1790)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Suspend activity in presentation mode is selected
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Proceeding to non-business hours activites as presentation mode is off.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Attempting to install 0 updates UpdatesDeploymentAgent
29/09/2014 22:00:00 3240 (0x0CA8)
No actionable updates for install task. No attempt required.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Updates could not be installed at this time. Waiting for the next maintenance window.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
No current service window available to run updates assignment with time required = 1
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
Attempting to cancel any job started at non-business hours.
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
There are several updates found in the assignment (2 in the first, 216 in the second). Some of them are required but still the log says: No actionable updates.
The SERVICEWINDOWEVENT events originate from the business hours set in the client settings I suppose?
But I don't get why the log sais "No current service window available to run updates assignment with time required = 1"
Any advice?
Kind regards,
Bert

Hi,
What's the status in Software Center on clients?
Please check ScanAgent.log, WUAHandler.log, UpdatesHandler.log and Windowsupdate.log on the client to see if there is any helpful information.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

Hi,
We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
can read reg value as exempel.
IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
I found this
http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
/SaiTech

You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

SCCM 2012: Assigned updates to update group don't get there deployment

Hello,
Problem:
When I assign available updates to the update group the updates are not getting there deployment. Deployed: NO
(Previous months no problem)
Situation:
SCCM 2012 SP1
We made different Update groups. Example:
Windows 2008 R2
This group is deployed to different collections and has several deployments.
Steps taken:
Downloaded the new updates to Windows 2008 R2 Deployment Package (no errors)
Edit Membership and added updates to the Windows 2008 R2 update group (no errors)
When I check the update group I see the assigned updates in the group. The Downloaded Status is YES but the Deployed status is NO. When I check the update deploymensts it has no deployments.
Any idea where to find a solution for the problem? Which logs files to check?
Greetings

You could try and run this sql query to check the database directly and see if IsDeployed = 1 here. If that is the case there is just the console that is not updated. You'll need to change the Config Item ID (in red) to match the ID of your group, you'll
find this in the console. (Right click columns and add it)
select all upd.CI_ID,upd.LocaleID,upd.ApplicabilityCondition,upd.ArticleID,upd.BulletinID,upd.CI_ID,upd.CI_UniqueID,upd.CIType_ID,upd.CIVersion,upd.CreatedBy,upd.CustomSeverity,upd.CustomSeverityName,upd.DateCreated,upd.DateLastModified,upd.DatePosted,upd.DateRevised,upd.EffectiveDate,upd.EULAAccepted,upd.EULAExists,upd.EULASignoffDate,upd.EULASignoffUser,upd.IsUserCI,upd.InUse,upd.IsBroken,upd.IsBundle,upd.IsChild,upd.IsContentProvisioned,upd.IsDeployable,upd.IsDeployed,upd.IsEnabled,upd.IsExpired,upd.IsHidden,upd.IsLatest,upd.IsMetadataOnlyUpdate,upd.IsOfflineServiceable,upd.IsQuarantined,upd.IsSuperseded,upd.IsUserDefined,upd.LastModifiedBy,upd.LastStatusTime,upd.Description,upd.DisplayName,upd.CIInformativeURL,upd.LocaleID,upd.MaxExecutionTime,upd.ModelID,upd.ModelName,upd.NumMissing,upd.NumNotApplicable,upd.NumPresent,upd.NumTotal,upd.NumUnknown,upd.PercentCompliant,upd.PermittedUses,upd.PlatformType,upd.RequiresExclusiveHandling,upd.RevisionNumber,upd.SDMPackageVersion,upd.SedoObjectVersion,upd.Severity,upd.SeverityName,upd.SourceSite
from fn_ListUpdateCIs(1033) as upd,vSMS_CIRelation as cr where ((cr.FromCIID =
16822104
AND cr.RelationType = 1) AND upd.CI_ID = cr.ToCIID)

Security Update Issues

After updating my iMac Desktop with the latest security update, now I can't connect to the internet. Every other computer can connect to the internet, so it is not my network. Is anyone else having issues and is there anything that can fix it?

Same issue.. my post is here https://discussions.apple.com/message/25032610#25032610.
No replies as of yet.

SCCM 2012- Security updates issue

Similar Messages

Maybe you are looking for