SCCM 2012 vs WSUS for Windows Server Updates

Hi,
Can anyone assist with clarifying the benefit of using SCCM 2012 for server patching over WSUS. As far as i understand SCCM can manage updates for third party applications if configured correctly. However if this is the only benefit I cannot see a clear
reason for using it.
Any information on the benefits of SCCM for server patching would be much appreciated.
Regards,
Michael.

Hi,
There are many reasons to use SCCM for patching instead of WSUS, I wrote a blog post a while ago listing 12 reasons why you should use it.
http://ccmexec.com/2012/08/top-11-reasons-why-you-should-use-configmgr-2012-for-managing-software-updates/
I hope that helps!
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Similar Messages

Configuration failed for Windows Server Update Services on Server 2012 R2 Essentials (Trial Version)

Hi,
I'm trying to setup the WSUS on the Server 2012 R2 Essentials (Trial Version) but with no luck. Below are the logs generated. Hopefully someone can guide me on this. Thanks.
2014-10-15 12:23:06 Postinstall started
2014-10-15 12:23:06 Detected role services: Api, UI, WidDatabase, Services
2014-10-15 12:23:06 Start: LoadSettingsFromXml
2014-10-15 12:23:06 Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentLocal
2014-10-15 12:23:06 Value is true
2014-10-15 12:23:06 End: GetConfigValue
2014-10-15 12:23:06 Start: GetConfigValue with filename=UpdateServices-Services.xml item=ContentDirectory
2014-10-15 12:23:06 Value is C:\WSUS
2014-10-15 12:23:06 End: GetConfigValue
2014-10-15 12:23:06 Content directory is C:\WSUS
2014-10-15 12:23:06 Database roleservice is not installed
2014-10-15 12:23:06 End: LoadSettingsFromXml
Post install is starting
2014-10-15 12:23:06 Start: Run
2014-10-15 12:23:06 Fetching WsusAdministratorsSid from registry store
2014-10-15 12:23:06 Value is S-1-5-21-308464661-3380577483-199018475-1000
2014-10-15 12:23:06 Fetching WsusReportersSid from registry store
2014-10-15 12:23:06 Value is S-1-5-21-308464661-3380577483-199018475-1001
2014-10-15 12:23:19 Configuring content directory...
2014-10-15 12:23:19 Configuring groups...
2014-10-15 12:23:19 Starting group configuration for WSUS Administrators...
2014-10-15 12:23:19 Found group in regsitry, attempting to use it...
2014-10-15 12:23:22 Writing group to registry...
2014-10-15 12:23:22 Finished group creation
2014-10-15 12:23:22 Starting group configuration for WSUS Reporters...
2014-10-15 12:23:22 Found group in regsitry, attempting to use it...
2014-10-15 12:23:22 Writing group to registry...
2014-10-15 12:23:22 Finished group creation
2014-10-15 12:23:22 Configuring permissions...
2014-10-15 12:23:22 Fetching content directory...
2014-10-15 12:23:22 Fetching ContentDir from registry store
2014-10-15 12:23:22 Value is C:\WSUS
2014-10-15 12:23:22 Fetching group SIDs...
2014-10-15 12:23:22 Fetching WsusAdministratorsSid from registry store
2014-10-15 12:23:22 Value is S-1-5-21-308464661-3380577483-199018475-1000
2014-10-15 12:23:22 Fetching WsusReportersSid from registry store
2014-10-15 12:23:22 Value is S-1-5-21-308464661-3380577483-199018475-1001
2014-10-15 12:23:22 Creating group principals...
2014-10-15 12:23:22 Granting directory permissions...
2014-10-15 12:23:23 Granting permissions on content directory...
2014-10-15 12:23:23 Granting registry permissions...
2014-10-15 12:23:23 Granting registry permissions...
2014-10-15 12:23:23 Granting registry permissions...
2014-10-15 12:23:23 Configuring shares...
2014-10-15 12:23:23 Configuring network shares...
2014-10-15 12:23:23 Fetching content directory...
2014-10-15 12:23:23 Fetching ContentDir from registry store
2014-10-15 12:23:23 Value is C:\WSUS
2014-10-15 12:23:23 Fetching WSUS admin SID...
2014-10-15 12:23:23 Fetching WsusAdministratorsSid from registry store
2014-10-15 12:23:23 Value is S-1-5-21-308464661-3380577483-199018475-1000
2014-10-15 12:23:23 Content directory is local, creating content shares...
2014-10-15 12:23:25 Creating share "UpdateServicesPackages" with path "C:\WSUS\UpdateServicesPackages" and description "A network share to be used by client systems for collecting all software packages (usually applications) published
on this WSUS system."
2014-10-15 12:23:25 Creating share...
2014-10-15 12:23:25 Share successfully created
2014-10-15 12:23:25 Creating share "WsusContent" with path "C:\WSUS\WsusContent" and description "A network share to be used by Local Publishing to place published content on this WSUS system."
2014-10-15 12:23:26 Creating share...
2014-10-15 12:23:26 Share successfully created
2014-10-15 12:23:26 Creating share "WSUSTemp" with path "C:\Program Files\Update Services\LogFiles\WSUSTemp" and description "A network share used by Local Publishing from a Remote WSUS Console Instance."
2014-10-15 12:23:27 Creating share...
2014-10-15 12:23:27 Share successfully created
2014-10-15 12:23:27 Finished creating content shares
2014-10-15 12:23:27 Stopping service WSUSService
2014-10-15 12:23:27 Stopping service W3SVC
2014-10-15 12:23:27 Configuring WID database...
2014-10-15 12:23:27 Configuring the database...
2014-10-15 12:23:27 Establishing DB connection...
2014-10-15 12:23:27 Checking to see if database exists...
2014-10-15 12:23:28 Database exists
2014-10-15 12:23:28 Switching database to single user mode...
2014-10-15 12:23:32 Loading install type query...
2014-10-15 12:23:32 DECLARE @currentDBVersion int
DECLARE @scriptMajorVersion int = (9600)
DECLARE @scriptMinorVersion int = (16384)
DECLARE @databaseMajorVersion int
DECLARE @databaseMinorVersion int
DECLARE @databaseBuildNumber nvarchar(10)
IF NOT EXISTS(SELECT * FROM sys.databases WHERE name='SUSDB')
BEGIN
SELECT 1
END
ELSE
BEGIN
SET @currentDBVersion = (SELECT SchemaVersion FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
SET @databaseBuildNumber = (SELECT BuildNumber FROM SUSDB.dbo.tbSchemaVersion WHERE ComponentName = 'CoreDB')
DECLARE @delimiterPosition INT = CHARINDEX('.', @databaseBuildNumber)
IF (@delimiterPosition = 0)
BEGIN
RAISERROR('Invalid schema version number', 16, 1) with nowait
return
END
SET @databaseMajorVersion = SUBSTRING(@databaseBuildNumber, 1, @delimiterPosition - 1)
SET @databaseMinorVersion = SUBSTRING(@databaseBuildNumber, (@delimiterPosition + 1), (10 - @delimiterPosition))
IF @currentDBVersion < 926
BEGIN
SELECT 3
END
ELSE
BEGIN
IF (@scriptMajorVersion > @databaseMajorVersion OR
(@scriptMajorVersion = @databaseMajorVersion AND @scriptMinorVersion > @databaseMinorVersion))
BEGIN
SELECT 2
END
ELSE IF (@scriptMajorVersion = @databaseMajorVersion AND
@scriptMinorVersion = @databaseMinorVersion)
BEGIN
SELECT 0
END
ELSE
BEGIN
SELECT 4
END
END
END
2014-10-15 12:23:32 Install type is: Reinstall
2014-10-15 12:23:32 Creating logins...
2014-10-15 12:23:32 Fetching account info for S-1-5-20
2014-10-15 12:23:32 Found principal
2014-10-15 12:23:32 Found account
2014-10-15 12:23:32 Got binary SID
2014-10-15 12:23:35 Fetching WsusAdministratorsSid from registry store
2014-10-15 12:23:35 Value is S-1-5-21-308464661-3380577483-199018475-1000
2014-10-15 12:23:35 Fetching account info for S-1-5-21-308464661-3380577483-199018475-1000
2014-10-15 12:23:35 Found principal
2014-10-15 12:23:35 Found account
2014-10-15 12:23:35 Got binary SID
2014-10-15 12:23:35 Setting content location...
2014-10-15 12:23:35 Fetching ContentDir from registry store
2014-10-15 12:23:35 Value is C:\WSUS
2014-10-15 12:23:40 Swtching DB to multi-user mode......
2014-10-15 12:23:47 Finished setting multi-user mode
2014-10-15 12:23:47 Writing DB settings to registry...
2014-10-15 12:23:47 Marking PostInstall done for UpdateServices-WidDatabase in the registry...
2014-10-15 12:23:47 Starting service W3SVC
2014-10-15 12:23:47 Configuring IIS...
2014-10-15 12:23:47 Start: ConfigureWebsite
2014-10-15 12:23:51 System.Runtime.InteropServices.COMException (0x80070003): The system cannot find the path specified.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at Microsoft.UpdateServices.Administration.UseCustomWebSite..ctor()
at Microsoft.UpdateServices.Administration.PostInstall.ConfigureWebsite(Int32 portNumber)
at Microsoft.UpdateServices.Administration.PostInstall.Run()
at Microsoft.UpdateServices.Administration.PostInstall.Execute(String[] arguments)
Fatal Error: The system cannot find the path specified.

2014-10-15 12:23:47 Start: ConfigureWebsite
2014-10-15 12:23:51 System.Runtime.InteropServices.COMException (0x80070003): The system cannot find the path specified.
Looks like it failed trying to setup the website.
2014-10-15 12:23:27 Configuring WID database...
2014-10-15 12:23:27 Configuring the database...
2014-10-15 12:23:27 Establishing DB connection...
2014-10-15 12:23:27 Checking to see if database exists...
2014-10-15 12:23:28 Database exists
This also looks like its a RE-installation of WSUS.
Any chance the "WSUS Administration" v-root is already present and did not get deleted after the last uninstallation?
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

SCCM 2012 SP1 SUP on Windows Server 2012

Hi sccm guys,
I'm having Troubles to get the SUP role working on my Windows Server 2012. I'm using SCCM 2012 SP1. I installed (and did not configure) the WSUS role from the Server Manager. I Chose to install the DB on the local SQL instance (no WID instance).
Then I added the SUP role to the Server and configured it with the seperate wsus Administration site (Ports 8530 and 8531).
WSUS gets configured partially (Proxy Settings and "Products and Classification" Options only for Office and Windows)
The folowing error pops up in the wcm.log
Failed to set Subscriptions on the WSUS Server. Error:(-2147467259)Unspecified error
Any clues?
Cheers
Sebastian Bammer

Also did not fix my issue. A round of my logs:
Checking for supported version of WSUS (min WSUS 3.0 SP2 + KB2720211 + KB2734608)
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Checking runtime v2.0.50727... SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:28:59 a.m. 3556 (0x0DE4)
Did not find supported version of assembly Microsoft.UpdateServices.Administration.
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Checking runtime v4.0.30319... SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:28:59 a.m. 3556 (0x0DE4)
Found supported assembly Microsoft.UpdateServices.Administration version 4.0.0.0, file version 6.2.9200.16384
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Found supported assembly Microsoft.UpdateServices.BaseApi version 4.0.0.0, file version 6.2.9200.16384
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Supported WSUS version found SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:28:59 a.m. 3556 (0x0DE4)
Using DOMAIN\Administrator credentials for network connections
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Attempting connection to WSUS server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Successfully connected to server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Verify Upstream Server settings on the Active WSUS Server
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
No changes - WSUS Server settings are correctly configured and Upstream Server is set to Microsoft Update
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Done using DOMAIN\Administrator credentials
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Refreshing categories from WSUS server SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:28:59 a.m. 3556 (0x0DE4)
Using DOMAIN\Administrator credentials for network connections
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Attempting connection to WSUS server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Successfully connected to server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:28:59 a.m.
3556 (0x0DE4)
Done using DOMAIN\Administrator credentials
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:14 a.m.
3556 (0x0DE4)
Successfully refreshed categories from WSUS server
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:16 a.m.
3556 (0x0DE4)
Using DOMAIN\Administrator credentials for network connections
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:21 a.m.
3556 (0x0DE4)
Attempting connection to WSUS server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:21 a.m.
3556 (0x0DE4)
Successfully connected to server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:21 a.m.
3556 (0x0DE4)
Category Product:587f7961-187a-4419-8972-318be1c318af (Microsoft Dynamics CRM 2011 SHS) not found on WSUS
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:21 a.m.
3556 (0x0DE4)
Starting WSUS category sync from upstream...
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:21 a.m.
3556 (0x0DE4)
Refreshing categories from WSUS server SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:29:26 a.m. 3556 (0x0DE4)
Using DOMAIN\Administrator credentials for network connections
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:26 a.m.
3556 (0x0DE4)
Attempting connection to WSUS server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:26 a.m.
3556 (0x0DE4)
Successfully connected to server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:26 a.m.
3556 (0x0DE4)
Done using DOMAIN\Administrator credentials
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:41 a.m.
3556 (0x0DE4)
Successfully refreshed categories from WSUS server
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Done using DOMAIN\Administrator credentials
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Using DOMAIN\Administrator credentials for network connections
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Attempting connection to WSUS server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Successfully connected to server: SCCM01.domain, port: 8530, useSSL: False
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Category Product:587f7961-187a-4419-8972-318be1c318af (Microsoft Dynamics CRM 2011 SHS) not found on WSUS
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Subscription contains categories unknown to WSUS.
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Done using DOMAIN\Administrator credentials
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
Failed to set Subscriptions on the WSUS Server. Error:(-2147467259)Unspecified error
SMS_WSUS_CONFIGURATION_MANAGER 15/01/2013 8:29:42 a.m.
3556 (0x0DE4)
STATMSG: ID=6603 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_CONFIGURATION_MANAGER" SYS=SCCM01.domain SITE=AKL PID=1544 TID=3556 GMTDATE=Mon Jan 14 19:29:42.723 2013 ISTR0="SCCM01.domain" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7="" ISTR8=""
ISTR9="" NUMATTRS=0 SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:29:42 a.m. 3556 (0x0DE4)
Waiting for changes for 59 minutes SMS_WSUS_CONFIGURATION_MANAGER
15/01/2013 8:29:42 a.m. 3556 (0x0DE4)
Thanks Christoph

Installing terminal server role on windows server 2012 to use for Windows server 2008 R2 machines.

Dear
Our current setup is as follows :-
Active Driectory is in Windows Server 2003.
Citrix Xenapp version 5.6 with all Xenapp servers in Windows Server 2003
Now we are upgrading our Citrix farm to 6.5 and all Xen app servers into Windows Server 2008R2.
We did the configuration and testing; everything works fine except the terminal server is not configured which gives the pop always for the expiry date.
We do have license for 2012 terminal server which is not possible to downgrade for some reason and managent need to install new Windows Server 2012 for terminal server and activte the licenses.
My question is :-
1 Whether Windows Server 2008 R2 will get RDS cal license from Windows Server 2012 terminal server (RDS CAL license is of windows server 2012).
2. What is the role and features I need to activate in Server 2012 in order to use for Citrix 6.5 (only applicable fetaure for getting the RDS cal license.)
3. Whether I can add this 2012 server into domain. Is it possible to add 2012 server into Windows Server 2003 AD.
Your early reply is highly appreciated.

Thanks Jeremy..
I got exactly the right answers I am lookoing for ..
I successfully activated the terminal service on the newly created Windows 2012 Server and installed the retail license pack we had of 50+50+25 keys . It later shows the 125 keys successfully applied.
when I tried to link the Xenapp (Windows Server2008R2) to the license server, it first gives me error that session host service role is not installed on the ternial server. So I installed that role also in the terminal server.
But now its anothee error as below.
RDS Cals are not available for this Remote Desktop Session host server, and licensing Diagnostic has identified licensing problems for the RD session host server.
1. Is it wrong I did by installing session host server role into the terminal server (but really it gave me error like 'session host server role is not running on the license server' when I tried to link the license server).
2. Is it the problem that Windows Server 2008 R2 will not get license from 2012 RDS CAL license.
3. whether Clearing house will take time to update the license.
Your reply is highly appreciated. I need to know whether any other way I can link the Windows Server 2008 R2 Servers (Xenapp) to the license server.

SCCM 2012 CU3 / WSUS - Update files are being deleted

We have been running this configuration since April of last year and haven't had any problems.
The problem is a majority of the window/security updates files in the WSUSContent folder are missing. I have ran wsusutil /reset and it takes a day or so but it will successfully download the 80GB of missing files. But after a few days they are
once again missing. We do run our EPP updates through WSUS and we have no problems with those.
I have searched endlessly through the log files, I can see where it goes through and skips them due to being superseded.
Do not see any database or communication issues between SCCM and WSUS, per the wsyncmgr.log it sees the thousands of that are available from our WSUS server.
So, any suggestions as to what might be causing the update files to be deleted from the WSUSContent folder?
We are running this on:
Server 2012 / SCCM 2012 CU3 / WSUS for 2012

So, just to make sure I understand. Is that we should be deploying updates from the SCCM Configmgr?
If you want to use the integrate experience, then yes.
but the problem is that a majority of updates are showing Downloaded = No when looking under All Software Updates
You need to either manually initiate the download of updates or set up an Automatic Deployment Rule (ADR). Either will cause ConfigMgr to download the updates placing them into an update package (which in turn gets placed on a DP where the clients can access
and download the updates).
wsynclog shows the sync of the update catalog, i.e., the metadata, and not the actual update binaries.
Jason | http://blog.configmgrftw.com

SCCM 2012 using SUP to Windows 2012 R2 WSUS

I have the following environment setup:
1. Windows Server 2012 R2 with SCCM 2012 SP1
2. Windows Server 2012 R2 with WSUS installed
3. Windows Server 2008 R2 with SQL Server 2012 SP1
I am trying to connect SCCM to the WSUS server as a SUP. I have reinstalled and configured countless times. I've tried Sebastian's steps near the middle-end of this http://social.technet.microsoft.com/Forums/windowsserver/en-US/29135ae5-5f0c-49d9-b7ad-f4d5e9664a33/sccm-2012-sp1-sup-on-windows-server-2012?forum=configmanagerdeployment
I keep seeing an error in the WCM.log that the WSUS version is not supported. The WSUS version on the Windows 2012 R2 server is 6.3.9600.16384
Permissions should not be an issue. I have configured a Domain account and have added as a local administrator and also the WSUS Admin group. Firewall is not an issue as ports are open.
Do I have to switch my WSUS server to 2008 R2? Or remove it entirely and let SCCM install it as a SUP? This is environment is entirely from scratch.

I was finally able to get this to work. My logs were continuously showing that SCCM2012 was looking for WSUS 3.0 SP2 (+ KB). I installed WSUS locally on the SCCM 2012 server and added a SUP there. I was then able to successfully add the
remote WSUS server and it seems to be working now.

Database instance for SCCM 2012 and WSUS on a single primary site server

I am going to install SCCM 2012 and its SQL database on a single physical server. This is going to be a single primary site server. The default SQL instance will be dedicated to SCCM 2012 with no other named instances to be added on the SQL server down
the road.
During the WSUS server role installation, there is the Database Options page asking for using (1) Windows Internal Database, (2) existing db server on this computer, or (3) an external db server.
Since SCCM 2012 doesn't share db instance with others, how should I handle the WSUS db that's going to be hosted on the same SCCM/SQL physical server? Do I really need to create a separate SQL instance just for the WSUS db?
Thanks and regards.

Even though you can do it, it is the best practice to have SCCM 2012 and WSUS installed on separate instances.
http://technet.microsoft.com/en-us/library/hh692394
When the Configuration Manager and WSUS databases use the same SQL Server and share the same instance of SQL Server, you cannot easily determine the resource usage between the two applications. When you use a different SQL Server instance
for Configuration Manager and WSUS, it is easier to troubleshoot and diagnose resource usage issues that might occur for each application.

Security Update for Windows Server 2012 R2 (KB3042553)

Hello,
Security Update for Windows Server 2012 R2 (KB3042553) has been advised to be critical update to deal with Vulnerability in HTTP.sys which could allow remote code execution.
However due to some reason I am unable to apply the patch to any of the Windows 2012 R2 servers. It errors - The update is not applicable to your computer, when tried to install manually / locally.
I tried to push it via WSUS and the patch is not getting detected by the servers.
Regional language settings are set to match Windows display language (Which is English).
Is anyone else experiencing this issue too? If so is there way to get this deployed please.
Thank you.
Kumar G

Hi Kumar,
I suggest you check the file version of Http.sys and compare it with the one documented in the KB article below:
MS15-034: Vulnerability in HTTP.sys could allow remote code execution: April 14, 2015
https://support.microsoft.com/en-us/kb/3042553
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Print Management Console displays no printers after applying Windows Update for Windows Server 2012 R2 (KB2995388)

After installing optional Windows Update for Windows Server 2012 R2 (KB2995388) on a print server upgraded from Windows 2012 to Windows 2012 R2, the Print Management Console wouldn't display locally shared or remotely shared printers. Another print server
could see the printers on this server, but it couldn't see it's own. Removal of the patch resolved the issue.

Hi,
à
Removal of the patch resolved the issue.
Thanks for sharing in the forum. Your time and efforts are highly appreciated.
On current situation, would you please let me confirm something more?
Please check if this update rollup package (KB2995388) install successfully.
Please run sfc /scannow command to scan all protected system files after installed this update.
If be possible, please re-install Print Server feature on the server after installed this update. Any find?
If any update, please feel free to let me know.
Hope this helps.
Best regards,
Justin Gu

October 2014 update rollup for Windows Server 2012 R2 and Data Protection Manager 2012 R2

Hello all,
After installing the October 2014 update rollup for Windows Server 2012 R2 (KB2995388) on our Windows 2012 R2 Core Edition backup jobs of System State start to Fail, below the generic error:
The replica of Non VSS Datasource Writer on hostname.domain is inconsistent with the protected data source. All protection activities for this data source will fail until the replica is synchronized with consistency check.
The job was cancelled. The user either cancelled the job or modified the associated protection group.
Removing the update rollup all jobs complete without errors. Somebody is expiriencing the same issue? How can we resolve the problem?
Thnks, Andrea

Hi Andrea,
Have you installed the update 2919355?
To apply update 2995388, you must first install update 2919355 on Windows 8.1 or Windows Server 2012 R2.
According to the official website, the issue which you described is not listed as the known issue.
Please uninstall this update and continue to monitor the official website for the latest news.
Best Regards.
Steven Lee
TechNet Community Support

The MS15-10 Security Update for Windows Server 2012/R2 Essentials and the Client Restore Functionality

The MS15-10 Security Update for Windows Server 2012/R2 Essentials and the Client Restore Functionality - The Windows Server Essentials and Small Business Server Blog - Site Home - TechNet Blogs:
http://blogs.technet.com/b/sbs/archive/2015/03/13/the-ms15-10-security-update-for-windows-server-2012-r2-essentials-and-the-client-restore-functionality.aspx
FYI

Hi Susan. I hope there's a better 'fix' coming to replace this "uninstall the updates, restore, then reinstall the updates after the restore". This kind of workaround requires that all of us remember that there's a problem
with KB3023562 and KB3004375 from now until the end of WS2012E. Not sure I'll remember this 6 months from now when the problem crops up during a restore. -:(
Merv Porter
=========================

Got Display driver via Windows Update for Windows 8.1 and try to use it for Windows Server 2012 R2

Hi Everyone,
the following driver cab is from Windows Update:
https://onedrive.live.com/?cid=5be01620eea95d8c&id=5BE01620EEA95D8C!138&ithint=file,.cab&authkey=!APDi54-R1Ob5IWQ
It includes this display driver:
Intel(R) Q45/Q43 Express Chipset (Microsoft Corporation - WDDM 1.1)
My problem is: I can't install this driver on Windows Server 2012 R2.
I tried the following, nothing worked:
a) pnputil -i -a intel.cab
b) Extract cab, update the device's driver in device manager, select "search for driver software in this location"
c) copy the files in system32/, system32/drivers, syswow64/ from a Windows 8.1 system to a Windows Server 2012 R2 system
Isn't it true that any Windows 8.1 driver should also work for Windows Server 2012 R2 (same os version)?
Thanks for your replies.
PS: I first posted my question here:
http://answers.microsoft.com/en-us/windows/forum/windows8_1-hardware/got-display-driver-via-windows-update-for-windows/31c287c8-ef84-4c81-8530-8c51412376b7

Hi,
Additionally, did you check this article?
http://www.driveridentifier.com/scan/download.php?item_id=90475670&scanid=9B44546E3BB9410D877D9A90D1439AF8&hardware_id=PCI%5CVEN_8086%26DEV_2E12
Regards.
Vivian Wang

SCCM 2012 SP1 + WSUS + Server 2012 + SQL Server 2012

Hi all;
I installed SCCM 2012 with Sp1 for my site server and everything is going well.. And than i installed the WSUS role on my Windows Server 2012 and SCCM 2012 SP1 it gave an error message which is "Fatal Error: The schema version of the database is from a newer
version of WSUS than currently installed. You must either patch your WSUS server to at least that version or drop the database." My database server is SQL Server 2012... Do you know any pathc for WSUS or SQL Server 2012 doesnt support WSUS yet???
Thank You...
MCT

Normally if you are going to install SCCM 2012 SP1 +Windows 2012 with SQL 2012, Then you better use the SQL 2012 sp1.
also when you are installing the WSUS version 6.2 which come with server 2012 make sure you leave the default settings as it is. it shows in the below article.
also when you are giving the path to save the WSUS contents make sure the drive you going to create the wsus folder and the place where you going to download the updates is having free disk space and its formatted with the NTFS volume. Also the service account
you are using for this configuration should have the admin rights to the location of the wsus folder you going to create,
Thanks
Hasitha

Using WSUS for Cluster Aware Updates and SCCM???

Can WSUS support SCCM and CAU(cluster aware update) from the same WSUS instance? E.G. If I have my SCCM infrastructure getting its patches from a server called SCCM01 lets say and the primary/central site is also on this box, can the WSUS instance on
this server support CAU or will that break SCCM? I ask because one of our admins did exactly this a few weeks ago and we end up having to reinstall WSUS. It could have been a coincidence but that WSUS instance had been running fine since it was built. Seems
kina strange it broke relatively quickly.
I've read plenty of sites that say to avoid meddling in the WSUS console once SCCM is installed but I can't find a specific technet article saying not to do this. I just built the 2012 environment and they're wanting to configure it the same way and I'm
refusing because I suspect it will break either SCCM 2012 or WSUS or both! Please if someone could point me in the right direction or offer some clarity I would very much appreciate it. So far all I've seen about CAU is that it does support SCCM and WSUS but
I can't find any documents saying what the repercussions of configuring CAU to use the same WSUS instance that SCCM uses. Thanks in advance. -KR.

Correct, ConfigMgr is unaware of cluster updating or the WSUS capabilities around clustering.
Also correct that direct WSUS administration after WSUS is integrated with ConfigMgr is a bad thing. There is no specific article that says don't do "stuff" in the WSUS admin console but it is eluded to in the TechNet docs (http://technet.microsoft.com/en-us/library/gg712696.aspx) and
I do know that it is specifically unsupported. I also know from experience that it will/can cause issues.
Cluster patching with ConfigMgr can be done using multiple techniques including maintenance windows, Orchestrator, or other automation tools but there's nothing definitively built in
Jason | http://blog.configmgrftw.com | @jasonsandys

Update error of SQL Server 2012 enterprise running on Windows server 2008 standard SP2 (32 bits)

Hi there;
I have a windows server 2008 SP2 (32bits) in which I have an instance of SQL Server
2008 and another of 2012.
My Windows server 2008 installed the following updates; (see below).
(KB2898858),(KB2909921),(KB890830),(KB2898869),(KB2911502),(KB2901126),
(KB2916036),(KB2862973),(KB2901113)
After the machine was re-started, I was not abble to connect
to the instance of SQL Server 2012. I am able
to connect to the instance of SQL Server 2008.
The error message I get when I atemp to connect can be found
at the end of the list of updates below.
Do I need to uninstall an update? if so, which one and how do I do that?
Thanks Gabriel I. Ruiz
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2898858)
Installation date: ‎2/‎12/‎2014 11:42 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2898858
Cumulative Security Update for Internet Explorer 9 for Windows Server 2008 (KB2909921)
Installation date: ‎2/‎12/‎2014 11:42 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2909921
Windows Malicious Software Removal Tool - February 2014 (KB890830)
Installation date: ‎2/‎12/‎2014 11:41 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/890830
Security Update for Microsoft .NET Framework 4.5.1 on Windows 7, Windows Vista and Windows Server 2008 x86 (KB2898869)
Installation date: ‎2/‎12/‎2014 11:40 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2898869
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2911502)
Installation date: ‎2/‎12/‎2014 11:36 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2911502
Security Update for Microsoft .NET Framework 4.5.1 on Windows 7, Windows Vista, and Windows Server 2008 x86 (KB2901126)
Installation date: ‎2/‎12/‎2014 11:36 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2901126
Security Update for Windows Server 2008 (KB2916036)
Installation date: ‎2/‎12/‎2014 11:34 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2916036
Security Update for Windows Server 2008 (KB2862973)
Installation date: ‎2/‎12/‎2014 11:34 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2862973
Security Update for Microsoft .NET Framework 2.0 SP2 on Windows Vista SP2 and Windows Server 2008 SP2 x86 (KB2901113)
Installation date: ‎2/‎12/‎2014 11:34 PM
Installation status: Successful
Update type: Important
More information:
http://support.microsoft.com/kb/2901113
===================================
Cannot connect to HAVANA\HAVANA_2012_1ST.
===================================
The client was unable to establish a connection because of an error during connection initialization process before login. Possible causes include the following: the client tried to connect to an unsupported version of SQL Server; the server was too busy
to accept new connections; or there was a resource limitation (insufficient memory or maximum allowed connections) on the server. (provider: Shared Memory Provider, error: 0 - No process is on the other end of the pipe.) (.Net SqlClient Data Provider)
For help, click: http://go.microsoft.com/fwlink?ProdName=Microsoft%20SQL%20Server&EvtSrc=MSSQLServer&EvtID=233&LinkId=20476
Server Name: HAVANA\HAVANA_2012_1ST
Error Number: 233
Severity: 20
State: 0
Program Location:
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection, Action`1 wrapCloseInAction)
at System.Data.SqlClient.TdsParser.ThrowExceptionAndWarning(TdsParserStateObject stateObj, Boolean callerHasConnectionLock, Boolean asyncClose)
at System.Data.SqlClient.TdsParserStateObject.SNIWritePacket(SNIHandle handle, SNIPacket packet, UInt32& sniError, Boolean canAccumulate, Boolean callerHasConnectionLock)
at System.Data.SqlClient.TdsParserStateObject.WriteSni(Boolean canAccumulate)
at System.Data.SqlClient.TdsParserStateObject.WritePacket(Byte flushMode, Boolean canAccumulate)
at System.Data.SqlClient.TdsParser.SendPreLoginHandshake(Byte[] instanceName, Boolean encrypt)
at System.Data.SqlClient.TdsParser.Connect(ServerInfo serverInfo, SqlInternalConnectionTds connHandler, Boolean ignoreSniOpenTimeout, Int64 timerExpire, Boolean encrypt, Boolean trustServerCert, Boolean integratedSecurity, Boolean withFailover)
at System.Data.SqlClient.SqlInternalConnectionTds.AttemptOneLogin(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean ignoreSniOpenTimeout, TimeoutTimer timeout, Boolean withFailover)
at System.Data.SqlClient.SqlInternalConnectionTds.LoginNoFailover(ServerInfo serverInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance, SqlConnectionString connectionOptions, SqlCredential credential, TimeoutTimer
timeout)
at System.Data.SqlClient.SqlInternalConnectionTds.OpenLoginEnlist(TimeoutTimer timeout, SqlConnectionString connectionOptions, SqlCredential credential, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance)
at System.Data.SqlClient.SqlInternalConnectionTds..ctor(DbConnectionPoolIdentity identity, SqlConnectionString connectionOptions, SqlCredential credential, Object providerInfo, String newPassword, SecureString newSecurePassword, Boolean redirectedUserInstance,
SqlConnectionString userConnectionOptions, SessionData reconnectSessionData)
at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, DbConnectionPoolKey poolKey, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionFactory.TryGetConnection(DbConnection owningConnection, TaskCompletionSource`1 retry, DbConnectionOptions userOptions, DbConnectionInternal oldConnection, DbConnectionInternal& connection)
at System.Data.ProviderBase.DbConnectionInternal.TryOpenConnectionInternal(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
at System.Data.ProviderBase.DbConnectionClosed.TryOpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory, TaskCompletionSource`1 retry, DbConnectionOptions userOptions)
at System.Data.SqlClient.SqlConnection.TryOpenInner(TaskCompletionSource`1 retry)
at System.Data.SqlClient.SqlConnection.TryOpen(TaskCompletionSource`1 retry)
at System.Data.SqlClient.SqlConnection.Open()
at Microsoft.SqlServer.Management.SqlStudio.Explorer.ObjectExplorerService.ValidateConnection(UIConnectionInfo ci, IServerType server)
at Microsoft.SqlServer.Management.UI.ConnectionDlg.Connector.ConnectionThreadUser()
===================================
No process is on the other end of the pipe

Hi,
Check if SQL Server service is running fine. I doubt you may have changed the user account password used for SQL Server service. After restarting the machine, you also need to update the user account of SQL Server service in Configuration
Manager. Re-type the user account name and password under Log on tab and see how it helps.
Thanks.
Tracy Cai
TechNet Community Support

SCCM 2012 vs WSUS for Windows Server Updates

Similar Messages

Maybe you are looking for