SCCM 2012 Win Updates - send only Metadata to Clients?

Hi Community!
Is it possible to configure SCCM 2012, so that Clients (Branch Offices) will receive only Metadata from our Server and will download the content directly from the Internet? And if, yes....can you tell us how?
We had this configuration before (without SCCM) with 2 WSUS Servers (one with Database and one with only Metadata) and both centrally Managed.
This was a perfect Solution for us. Now Management want to do this with only 1 SCCM Server (WSUS installed on SCCM Server).
Best Regards
Marcus

This can be done with ConfigMgr 2012 SP1 (not RTM). I'm not sure why you would want a LAN client to download content from Microsoft Update rather than their local Distribution Point, but you can do it per software update Deployment with the Download
Settings option:
"If software updates are not available on preferred distribution point or remote distribution point, download content from Microsoft Update"
When you make your deployment, don't distribute the content for the Deployment Package to any DP's, and then your clients should download it from the internet.
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
<-- If this post was helpful, please click "Vote as Helpful".

Similar Messages

SCCM 2012 software update point not sync with Microsoft Updat,

Hi
Recently my SCCM 2012 software update is not syncing with microsoft update, am getting below error. can any one suggest/help me how to resolve this issue.
WebException: The remote server returned an error: (500) Internal Server Error.
at System.Net.HttpWebRequest.GetRequestStream(TransportContext& context)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.UpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie cookie, WebServiceCommunicationHelper webServiceHelper)
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.SyncConfigUpdatesFromUSS()
at Microsoft.UpdateServices.ServerSync.CatalogSyncAgentCore.ExecuteSyncProtocol(Boolean allowRedirect)

am just trying to tracert catalog.update.microsoft.com
from my wsus server but it is failed, would that be the reason/
Regards,
Madhan

SCCM 2012 SP1 update to R2

Hi!
SCCM 2012 SP1 update to R2.
I use SQL 2008R2 SP2 (10.50.4000.0), this version is Ok for SCCm 2012 R2 update?
cenubit

Yes it is.
See supported configurations
http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_SupConfigSQLDBconfig
Also, see procedure to upgrade from SP1 to R2
http://www.gerryhampsoncm.blogspot.ie/2013/10/in-place-upgrade-sccm-2012-sp1-to-r2.html
Also, note that CU1 for R2 has also been released. You should apply this afterwards.
http://support.microsoft.com/kb/2938441/en-us
Gerry Hampson | Blog:
www.gerryhampsoncm.blogspot.ie | LinkedIn:
Gerry Hampson | Twitter:
@gerryhampson

SCCM 2012 Software updates

Hi All,
We have SCCM 2012 R2 Server, We have been using more than a years ,
Now im facing crazy issues .
1.every month we using sccm server for deploying windows patches .
2.before patching we set maintenance schedules for device group.
3.patch deployment is working fine without any issues and we get the success 100 % compliants report in all the server .
Note:- but after one or two months later in Monitoring-->deployment tab-->its showing only few machines success results or deploying again old package''
this process is keep on rotating in all the deployment .
how to resolve this issues.
Regards,
Velu M

Hi,
You could try to initiate Software Updates Deployment Evaluation Cycle action from a problematic client, then check CIAgent.log, StateMessage.log to see if there are any helpful information.
Reference:
SCCM state messaging–in depth:http://blogs.msdn.com/b/steverac/archive/2011/01/07/sccm-state-messaging-in-depth.aspx
You could also follow the steps in the blog below to check state messages in WMI.
Software Update Compliance Reports – Detection State Unknown
http://blogs.technet.com/b/configmgrdogs/archive/2013/11/07/software-update-status-reports-detection-state-unknown.aspx
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 R2 - Updates not installing

Hi all,
I have a SCCM 2012 R2 setup at a customer which has problems with distributing updates to the Windows 7 computers in the environment. The update group (with updates that are 100% sure required) is deployed to some test computers but the updates don't get
installed. It is also configured to be able to install the updates without looking at any maintenance windows. I see in the reporting that the updates are required, so in my opinion they should get installed.
I've checked the registry and the Windows Updates registry keys are pointing towards the right server (my SCCM primary site server). I've created a new software update group with fewer updates, same problem.
What I find in the UpdatesDeployment.log on one of the test machines is rather strange:
Assignment {8209BD9C-A86C-460B-99B3-CD6364F8BD1B} has total CI = 2
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment ({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) reconnected to the existing job ({779CA9E2-ABB8-43E1-B8AE-F4A94BA8C761}) successfully.
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment {c076f100-c2f7-43f9-a3f9-51fd33872b94} has total CI = 216
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
Assignment ({c076f100-c2f7-43f9-a3f9-51fd33872b94}) reconnected to the existing job ({A9758363-1871-4BD9-86D9-1BE0D82531AE}) successfully.
UpdatesDeploymentAgent 29/09/2014 15:21:05
1244 (0x04DC)
OnPolicyModify for assignment ({8209BD9C-A86C-460B-99B3-CD6364F8BD1B})...
UpdatesDeploymentAgent 29/09/2014 15:23:18
2740 (0x0AB4)
Work in progress for assignment {8209BD9C-A86C-460B-99B3-CD6364F8BD1B}, forced trigger (TriggerEnforce) will be attempted when done
UpdatesDeploymentAgent 29/09/2014 15:23:18
2740 (0x0AB4)
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0
UpdatesDeploymentAgent 29/09/2014 15:30:32
4532 (0x11B4)
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 0
UpdatesDeploymentAgent 29/09/2014 15:30:32
4000 (0x0FA0)
Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>False</UseCachedResults></SoftwareUpdatesMessage>'
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Removing scan history to force non cached results
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Assignment({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Assignment({c076f100-c2f7-43f9-a3f9-51fd33872b94}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 15:46:47
4836 (0x12E4)
Evaluation initiated for (0) assignments. UpdatesDeploymentAgent
29/09/2014 15:46:47 4836 (0x12E4)
Message received: '<?xml version='1.0' ?><SoftwareUpdatesMessage MessageType='EvaluateAssignments'><UseCachedResults>True</UseCachedResults></SoftwareUpdatesMessage>'
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Assignment({8209BD9C-A86C-460B-99B3-CD6364F8BD1B}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Assignment({c076f100-c2f7-43f9-a3f9-51fd33872b94}) already in progress state (AssignmentStateDetecting). No need to evaluate
UpdatesDeploymentAgent 29/09/2014 17:06:31
6032 (0x1790)
Evaluation initiated for (0) assignments. UpdatesDeploymentAgent
29/09/2014 17:06:31 6032 (0x1790)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT START Event
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Suspend activity in presentation mode is selected
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
At least one user has elected to suspend non-business hours activity when in presentation mode. Checking for presentation mode.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Proceeding to non-business hours activites as presentation mode is off.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Auto install during non-business hours is disabled or never set, selecting only scheduled updates.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
A user-defined service window(non-business hours) is available. We will attempt to install any scheduled updates.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Attempting to install 0 updates UpdatesDeploymentAgent
29/09/2014 22:00:00 3240 (0x0CA8)
No actionable updates for install task. No attempt required.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
Updates could not be installed at this time. Waiting for the next maintenance window.
UpdatesDeploymentAgent 29/09/2014 22:00:00
3240 (0x0CA8)
CUpdateAssignmentsManager received a SERVICEWINDOWEVENT END Event
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
No current service window available to run updates assignment with time required = 1
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
Attempting to cancel any job started at non-business hours.
UpdatesDeploymentAgent 30/09/2014 5:00:00
3132 (0x0C3C)
There are several updates found in the assignment (2 in the first, 216 in the second). Some of them are required but still the log says: No actionable updates.
The SERVICEWINDOWEVENT events originate from the business hours set in the client settings I suppose?
But I don't get why the log sais "No current service window available to run updates assignment with time required = 1"
Any advice?
Kind regards,
Bert

Hi,
What's the status in Software Center on clients?
Please check ScanAgent.log, WUAHandler.log, UpdatesHandler.log and Windowsupdate.log on the client to see if there is any helpful information.
Best Regards,
Joyce
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 SP1 Update to CU5 not showing version 1600 for clients updated !

Recently upgraded SCCM 2012 SP1 and its showing a version of 5.0.7804.1600 as it should be. Pushed out the CU 5 client manager update to few machines and they are also showing .1600 as the version, however in SCCM 2012 manager itself it is not updating the
status of those machines from say .1000 or .1400 to .1600. Why is this happening and any solution for it ? I have also updated the CM on the server hosting the SCCM and is current to .1600 version.

Because the client agent version is returned from clients via heartbeat discovery which only occurs by default every 7 days. Thus, you need to be patient. Note that I generally recommend reducing the heartbeat cycle to at least once a day partly for
this reason.
Jason | http://blog.configmgrftw.com | @jasonsandys

Expiration and Supersedence within an SCCM 2012 Software Update Context

In SCCM 2012 I have put a process together where I wait till the Friday after Patch Tuesday to begin prepping for production Software Update deployments that will take place that following week, beginning on the first Sunday following Patch Tuesday. I wait
till Friday for preparation, because the thought is if I wait till then and synchronize the patches to grab the metadata later in the week, I will not pick up any patches that may have already been superseded or expired that were just released just days before
on Patch Tuesday.
My question is, is this a good practice? I have just been doing it this way for a while, but not sure it this is considered a best practice or what. I guess I am just looking for confirmation and also any other techniques, methods, and\or processes that
may serve me better.
If anyone can offer any input that can give me better insight, I would greatly appreciate it.
Thanks

So how does it work if I sync on Patch Tuesday after the patches are released, and build my packages and deployments right after that and deploy them to the clients and then I re-run another synchronization say on that following Thursday or Friday and find
out that one of those patches that I deployed has already expired or superseded?
Thanks Torsten

SCCM 2012 Software Updates not installing (bothh Windows patches & 3rd party updates)

Using SCCM 2012 R2, I am having a problem getting Windows updates to install. Applications published to people work, and basic software installations published to machines for a straight install work. However, both Windows patches and Adobe patches
fail to install on clients. I have imported the Adobe catalog into SCUP, and publish through WSUS. I can see the Adobe patches and Windows patches in SCCM, and can publish them. However, in deployment status out of 4 machines in my test group the Windows patches
installed on 1 and the other 3 are still in Unknown status with category of "Client check passed/Active". However, none of them are installing the patch - they don't even seem to try. All of those are Windows 7 PCs, incidentally. On Adobe patches,
one PC fails and the other 3 machines still sit in Unknown status. Certificates are distributed,
Any ideas what might cause the deployment to not push some targets, even when it's past the deadline?
Thanks,
Andy Maslin

An unknown status means that the clients are not reporting back to ConfigMgr correctly. This is often due to the WUA not pointing at the correct WSUS instance. You can verify this by examining the WUAHandler.log on one of those clients and it will clearly
indicate an issue with this which in turn is often due to a group policy overriding the ConfigMgr behavior.
Jason | http://blog.configmgrftw.com

SCCM 2012 Software Update Management for Windows Servers and how to automatic set SCOM maintenance mode?

Hi,
We planning to go one level higher to automat and have more dynamic Software Update Management for Windows Servers. We have SCCM 2012 R2, SCOM 2012 R2 and SCO 2012 R2.
Our plan is to pur server in an AD-Group to get Update Schedule, from the servers will be importet to an Collection for Automatic Update and reboot. If I understand Everything right SCOM can't read AD-Group and put then in an Schedule maintenance mode. SCOM
can read reg value as exempel.
IS there any smar way to make the SCOM Maintenance Mode Schedule dynamic?
I found this
http://www.scom2k7.com/scom-2012-maintenance-mode-scheduler/?
/SaiTech

You could use Orchestrator to put the servers from a specific collection, or AD group, in maintenance mode in SCOM. For an example see:
http://www.systemcentercentral.com/orchestrator-how-to-scom-maintenance-mode-for-windows-computers-in-an-sccm-collection/
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

SCCM 2012: Assigned updates to update group don't get there deployment

Hello,
Problem:
When I assign available updates to the update group the updates are not getting there deployment. Deployed: NO
(Previous months no problem)
Situation:
SCCM 2012 SP1
We made different Update groups. Example:
Windows 2008 R2
This group is deployed to different collections and has several deployments.
Steps taken:
Downloaded the new updates to Windows 2008 R2 Deployment Package (no errors)
Edit Membership and added updates to the Windows 2008 R2 update group (no errors)
When I check the update group I see the assigned updates in the group. The Downloaded Status is YES but the Deployed status is NO. When I check the update deploymensts it has no deployments.
Any idea where to find a solution for the problem? Which logs files to check?
Greetings

You could try and run this sql query to check the database directly and see if IsDeployed = 1 here. If that is the case there is just the console that is not updated. You'll need to change the Config Item ID (in red) to match the ID of your group, you'll
find this in the console. (Right click columns and add it)
select all upd.CI_ID,upd.LocaleID,upd.ApplicabilityCondition,upd.ArticleID,upd.BulletinID,upd.CI_ID,upd.CI_UniqueID,upd.CIType_ID,upd.CIVersion,upd.CreatedBy,upd.CustomSeverity,upd.CustomSeverityName,upd.DateCreated,upd.DateLastModified,upd.DatePosted,upd.DateRevised,upd.EffectiveDate,upd.EULAAccepted,upd.EULAExists,upd.EULASignoffDate,upd.EULASignoffUser,upd.IsUserCI,upd.InUse,upd.IsBroken,upd.IsBundle,upd.IsChild,upd.IsContentProvisioned,upd.IsDeployable,upd.IsDeployed,upd.IsEnabled,upd.IsExpired,upd.IsHidden,upd.IsLatest,upd.IsMetadataOnlyUpdate,upd.IsOfflineServiceable,upd.IsQuarantined,upd.IsSuperseded,upd.IsUserDefined,upd.LastModifiedBy,upd.LastStatusTime,upd.Description,upd.DisplayName,upd.CIInformativeURL,upd.LocaleID,upd.MaxExecutionTime,upd.ModelID,upd.ModelName,upd.NumMissing,upd.NumNotApplicable,upd.NumPresent,upd.NumTotal,upd.NumUnknown,upd.PercentCompliant,upd.PermittedUses,upd.PlatformType,upd.RequiresExclusiveHandling,upd.RevisionNumber,upd.SDMPackageVersion,upd.SedoObjectVersion,upd.Severity,upd.SeverityName,upd.SourceSite
from fn_ListUpdateCIs(1033) as upd,vSMS_CIRelation as cr where ((cr.FromCIID =
16822104
AND cr.RelationType = 1) AND upd.CI_ID = cr.ToCIID)

Deploy SCCM 2012 Monthly updates (not with ADR), updates get expired

Hi,
I’m looking howto use monthly updates in SCCM 2012 R2. This post is showing howto with automatic deployment rules (ADR), but I’d need to do this without ADR.
http://www.windows-noob.com/forums/index.php?/topic/6799-using-system-center-2012-configuration-manager-part-9-deploying-monthly-updates/
What I do:
1.filter on updates I need
2.add them to an update group
3.distribute these updates as mandatory to our default windows 7 collection
Now everything works fine until some updates in the update group get expired. Then no updates are distributed anymore. Please advise.
J.
Jan Hoedt

Leave the expired updates and group the remaining updates (create software group fo these) and deploy to your clients.
Search the updates in sccm console: Add criteria: Expired NO
Have a look in this post (Software updates deployment without ADR)
http://www.windows-noob.com/forums/index.php?/topic/4467-using-sccm-2012-rc-in-a-lab-part-6-deploying-software-updates/
Thanks, Prabha G

SCCM 2012 R2 Update not Downloading

Hi
i had install SCCM 2012 R2 and WSUS on the same server and i configure the software update point component .(End Point Protection) when I'm trying
to download software update, i click on All software updates repository right click and run synchronization i cant see any update.
wsyncmgr.log :
Thread terminated by service request. $$<SMS_WSUS_SYNC_MANAGER><07-14-2014 14:41:50.922-330><thread=5384 (0x1508)>
SMS_EXECUTIVE started SMS_WSUS_SYNC_MANAGER as thread ID 5976 (0x1758). $$<SMS_WSUS_SYNC_MANAGER><07-14-2014 14:46:27.078-330><thread=2736 (0xAB0)>
Log level 2 $$<SMS_WSUS_SYNC_MANAGER><07-14-2014 14:46:27.309-330><thread=5976 (0x1758)>
Wakeup by SCF change $$<SMS_WSUS_SYNC_MANAGER><07-14-2014 15:19:48.428-330><thread=5976 (0x1758)>
Please help

WCm log error
Remote configuration failed on WSUS Server.   SMS_WSUS_CONFIGURATION_MANAGER   7/15/2014 1:41:13 PM   5680 (0x1630)
STATMSG: ID=6600 SEV=E LEV=M SOURCE="SMS Server" COMP="SMS_WSUS_CONFIGURATION_MANAGER" SYS=BDC.mydomain.com SITE=NAV PID=2648 TID=5680 GMTDATE=Tue Jul 15 08:11:13.273 2014 ISTR0="BDC.mydomain.com" ISTR1="" ISTR2="" ISTR3="" ISTR4="" ISTR5="" ISTR6="" ISTR7=""
ISTR8="" ISTR9="" NUMATTRS=0   SMS_WSUS_CONFIGURATION_MANAGER   7/15/2014 1:41:13 PM   5680 (0x1630)
Setting new configuration state to 3 (WSUS_CONFIG_FAILED)   SMS_WSUS_CONFIGURATION_MANAGER   7/15/2014 1:41:13 PM   5680 (0x1630)
Waiting for changes for 49 minutes   SMS_WSUS_CONFIGURATION_MANAGER   7/15/2014 1:41:13 PM   5680 (0x1630)

SCCM 2012- Security updates issue

We are unable to find MS13-053 bulletin ID in our SCCM 2012 meta data list while we have already selected Critical updates and Security updates in classification list for Windows 7 and Windows 8 from products list of Software update point component properties.
Please let me know if i have missed something.
Please help.
Thanks
Mohit Kumar

Hi,
That’s very strange. How about re-run synchronization? Any changes?
If MS13-053 still cannot show up, you could also
download these updates manually, then deploy them.
Best Regards,
Joyce Li
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to configure SCCM 2012 discover user group only?

Hi,
I'm wondering if there is a way to discover user group only (ignore computer group) in SCCM 2012?
Jason

Hi,
Also note that by default, only security groups are discovered. However, you can discover the membership of distribution
groups when you select the checkbox for the option Discover the membership of distribution groups on
the Option tab
in the Active Directory Group Discovery Properties dialog box.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

SCCM 2012 R2 update from 2012 in VM on SDC and secodary DNS server

Hi there,
I'm currently running SCCM2012 (not R2) on a secondary domain controller and secondary DNS Server. Bought a license for this in 2013. Would like better separation from above functions and deploy R2 version. Two questions:
1) Is it recommended to install SCCM R2 in a VM on a machine running above applications?
2) Do I need a new license to go from SCCM 2012 to SCCM 2012 R2?
Thank you for an answer, Marcel

Actually, for #2, that's not true. ConfigMgr 2012 and ConfigMgr 2012 R2 are separate SKUs and require their own licensing. Just because you have ConfigMgr 2012 does not entitle you to 2012 R2. It depends upon how you licensed it in the first place. If
you have Software Assurance (SA), then yes, your current licensing applies. You should check with your LAR or call the Microsoft licensing helpdesk to figure out if you are licensed for R2.
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM 2012 Win Updates - send only Metadata to Clients?

Similar Messages

Maybe you are looking for