SCCM 2012: Windows update group gives invalid update

Hi,
I have deployed an update group to some pc's (about 60 updates). Now it seems one of the updates got stuck on the client: the client tries to download it to install but it's not on the server.
The server shows the update as invalid.
Tried to download it again, it does do it but it does NOT show as downloaded. The update
kb2687413 is perfectly valid.
Removed it from the update group but the client still tries to fetch this update (even after reboot).
My questions:
*how can I find out what's wrong with this update: why it was invalid (I do know the meaning of the icons: https://technet.microsoft.com/en-us/library/hh848254.aspx?f=255&MSPPError=-2147217396), why I can't download it or the status doesn't change whereas
it downloaded succesfully.
*how do I make sure the clients continue to install the remaning updates and don't try to fetch the (removed) update
Thanks for your input.
J.
Jan Hoedt

Hi,
Have you checked the log file PatchDownloader.log? Maybe it can give us some clues.
https://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SU_NAPLog
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Similar Messages

SCCM 2012: Active Directory Group Discovery, Delta Discovery?

Hi,
Our scenario:
*Software is requested via a seperate system which puts AD computer objects in groups
*Software within SCCM 2012 is deployed to computer collections
*Computer collections query AD groups, in those AD groups the pc's reside
*Collections memberships run via AD query (every 20 minutes)
*We deploy an OS (Windows 7) via SCCM
*Machine policy is updates every 20 minutes
What is important: AD Group discovery is set to full discovery every 7 days, delta discovery set to 15 minutes
So what happens:
*Pc is staged correctly with Windows 7 but software isn't coming through in time (sometimes it's there within the hour, sometimes it takes 6 hours)
*If we run a full AD Group discovery mostly software is installing immediately
*Sometimes a SCCM 2012 client machine reset policy or reinstall client solves the problem
My questions:
*Would it be better to run full discoveries every x minutes since this always solves our problem
*Would it be better to disable the delta discovery if we do the change above to minimize AD queries
=> tried that now (full discovery every 30 minutes and disabled delta discovery) but I don't want to put to much pressure on our domain controller
*Our software collections are limited to all systems, we could limit them to a Windows 7 collection. Probably we should do that but any suggestion how to do this safely in Powershell?
Please advise.
J.
Jan Hoedt
Note: what I don't get is why a full ad discovery system discovery sovles the problem since SCCM 2012 collections do a AD query, what 's the link there?

So, let me see if I get this correct for our situation:
Our own developed system puts pc’s in AD groups
SCCM 2012 polls these groups, by default 1/week full discovery then every 30 minutes a delta discovery
We deploy software to computer collections, these collections check the SCCM 2012 database every 30 minutes (collection update) Note: the query our collection do, is based upon requirement of Windows 6.1 + membership of an AD group.
The SCCM 2012 client/computer does a computer policy update every 30 minutes to see what collections it is member of and see then the software to be deployed
2 questions:
*Our my assumptions correct? Specifically point 3.: is the query fully coming from an ad sync (or also from sccm client, f.e. Windows 6.1%)?
*Don’t we have a step to much then, wouldn’t it be better to add a direct membership of the AD group within SCCM? This direct membership would mean no query and so save us about 20 minutes (run of query)?
Jan Hoedt

SCCM 2012: windows updates groups, based upon criteria required?

Hi,
Is it correct to say that, for updating Windows machines/creating a software update group, you can use the criteria "required" + deployed = no?
That would simplify our setup: just select the OS, prodcuts, severity and "required" + deployed = no would contain all necessary updates.
J.
Jan Hoedt

Concur with Torsten. In general, I think using required as a criterion is a bad practice for exactly what Torsten outlined above. Additionally, if you are doing OSD, how will you deploy the updates to those systems during the task sequence as not all updates
will be available for them?
Jason | http://blog.configmgrftw.com | @jasonsandys

Automaitc Updates through SCCM 2012 not showing up on the updates status

Hi,
I have configured Automatic Update rule on SCCM 2012 and it works fine but on the client machine i see this.
This is the update status it shows which means updates are not being installed since long time.
But when i see the update history it shows me the latest updates installed.
Why would this happen? please suggest.
Regards,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified

Hi,
That is as expected as the updates are installed using SCCM and not the Windows Update Agent, if you deploy a client using SCCM OSD and install software updates using SCCM and not WSUS/Windows Update it will actually say:
"Updates were installed: Never"
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

SCCM 2012 Compliance 7 Customize for Total Updates Needed

I can't find single report in SCCM 2012 that lists the total count of updates needed for each computer. This really irks me and many others as this and similar info was readily available with the old WSUS console. It also takes a lot more
clicks to get the same info in SCCM (if SCCM even has it) as it did in WSUS. Anyway, I've decided to try to customize an existing report. I made a copy of "Compliance 7 - Computers in a specific compliance state for an update group (secondary)".
Try as I might, I can't get the query to work right to create a field for number of updates required for each computer. I'd really like columns for Failed/Needed/Applied but I'll start with just Needed. Why they got rid of this in SCCM reporting baffles me.
I have several SQL queries that pull this info for needed patches when run in Management Studio but I can't get them to work in a SCCM Report. Does anyone know how to do this?
Ben JohnsonWY

I'm looking at Compliance 1, 5, and 7. The closest to what I want is Compliance 7 but with a new column for "Required Updates". I have that column made but it's not populated. I have a "Required Updates" Dataset now inside this custom
report. BUT the row of info in the table (computer name, last logon, etc) only lets you select fields from Dataset0. Where I'm stuck is how get to the "Required_Updates" field from the "Required Updates" dataset to appear in Dataset0.
I've spent a big chunk of time trying to get the code from the two queries merged but I can't get it to work. The other option is to somehow get the field to appear in the row's field selection list (ie, read field from both datasets).
Oh, and when I followed your steps above, I got the report created but it throws and "error during processing" error when I run it.
Ben JohnsonWY

SCCM 2012 - Windows 7 OSD wrong driver letter?

Hi,
I am having issues with SCCM 2012 OSD / MSD 2012 and deploying Windows 7
I am using a captured WIM and I have noticed that on a machine it deploys
to the E: drive even if I have not data on the hard disk (I have cleaned it
with diskpart). So when the task Sequence is finished it the Windows
directory is E:\Windows which is not what I want.
Now what I thought I would try is moving the CD-ROM drive to a different
SATA controller from AHCI port 2 to AHCI Port 3.
Now this made the OS deploy correctly to C: with the final state being C:\Windows
1. So my questions are "How" does SCCM determine what the final logical drive that
windows will be put on?
2. Is there a way I can force it to be C: drive no matter what port my CD-ROM is on?
3. Also if I am using UEFI and Bitlocker is the logic the same?
4. I have noticed when I run diskpart and do list volumes the CD-ROM drive appears?
in the list is this normal?
It seems very bizzare the way it works.
Thanks,
Ward.

Hi,
Thanks for your response actually we are already doing that. :)
Sorry I will re-correct my original post something I did not point out - opps - is we are trying to build these by USB.
It seems that if there is a clean partition and the system boots and happens to choose allocate either the USB key or DVD rom to C: drive then the OS will install on the wrong drive.
So my idea of moving it to another controller seems to make it better but not consistently reliable.
It seems to work if the following conditions are true - need to do a more testing to confirm:
The DVD rom shows up and USB not using the C: so it seems the it will work.
If there is already a partition on the drive called C: and it is already allocated then all seems ok as well
So can I get some more clarity on this - I would like to be able to control it better :)
Thanks,
Ward

Creating software update group for required updates ?

Hello,
I've been trying to find an easy way to create a software update group that contains required security updates for a specific device collection but no solution yet. It is easy to get which security updates are required for that collection via SQL query or
by using built-in report in sccm2012. The problem is, there is no way to easily create a update group to deploy from those lists. You have to add them one by one and that takes so much time. So i would be glad if someone have an answer for me?
Best Regards,

Thanks for your quick response. I have hundreds of required updates in the software update section. So you say deploy all of them to that collection even most of are not required for those devices. At this point it seems unreasonable to deploy so much
unnecessary file which will increase the burden on network and devices while it also increases the risk of failures. On the other hand it is also very time consuming to add approx. 50 update one by one to update group.

Software Update Group with Expired Updates

I might be interpreting this incorrectly, but it seems as though a machine is not installing any updates from a particular update group.
One or more of the updates are expired - Would this result in NONE of those updates deploying to the device??

Would this result in NONE of those updates deploying to the device??
No.
Torsten Meringer | http://www.mssccmfaq.de

How to configure SCCM 2012 discover user group only?

Hi,
I'm wondering if there is a way to discover user group only (ignore computer group) in SCCM 2012?
Jason

Hi,
Also note that by default, only security groups are discovered. However, you can discover the membership of distribution
groups when you select the checkbox for the option Discover the membership of distribution groups on
the Option tab
in the Active Directory Group Discovery Properties dialog box.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Sccm 2012 window update deployment

Hi
I am trying to deploy the software updates in servers, but the issue i am facing is that when i create the package of 170 patches and deploy on servers 2008, then the advertisement coming at client side is in different batches. Example:- In first instance
50 updates advertisement comes at client end and once i Install them and restart the servers then in second instance remaining server advertisement will come.
As I have taken the downtime, so I want that all the advertisement comes in one Instance, can somebody suggest me how to do this ?????
Thanks and Regards Deepak

Hi Deepak,
For 170 Patches yeah its more than enough but if you take office sp3 patch its around 680 MB ,if all the patches are Security/cumulative patches then i would its more than enough based on the deployments which i have done.
If your system's RAM is 4 GB or more than that i would say it will get installed in a go also sometime like jason said there may be multiple reboot required for patching on few machines.
How you planned the deployment is it mandatory with reboot or mandatory and suppressed reboot?
Kamala kannan.c| Please remember to click “Mark as Answer” or Vote as Helpful if its helpful for you. |Disclaimer: This posting is provided with no warranties and confers no rights

SCCM 2012 R2 Offline Servicing with Older Updates

We use to run Windows 7 Pro 32/64 Bit but we are upgrading to Windows 7 Enterprise 64Bit for BitLocker option on our machines.
I perform offline servicing on my reference build and capture .wim image but for some reason I still have to install over 100 updates. For example it will not install Windows 7 x64 SP1 and IE10.
I performed a search of Windows Updates Released on or after April 2011, downloaded the files to a new folder/group "Old Windows 7 Updates". I perform another "Schedule Updates" on the .wim file, still does not install the older updates.
I saw a post talking about using DISM to force the older updates on the image but that fails for me as I am beginner for using DISM.
Any suggestions would be great or help!

You can't inject SP1 using offline updates. You need to start with media provided by Microsoft that already has SP1 included and that will address your issues. You can easily download this from your MVLS site.
Jason | http://blog.configmgrftw.com

SCCM 2012 R2 Driver - Best Practices on Updating Driver Packages?

Example the new Surface Drivers were Release We are currently using September what is the best way to update the drivers? If Import it shows multiple drivers old and new... Thoughts? Blog Post?

No. You must always import drivers to be able to either one of the Apply Driver task types in a task sequence.
However, you can also run a driver installer provided by the vendor as a package because the driver installer is a generic exe that does whatever its supposed to do outside the control of ConfigMgr.
Note that although you can't use an Auto Apply Driver task in stand-alone media, you can absolutely use an Apply Driver Package in stand-alone media. In general, most folks do not rely on Auto Apply but instead rely on Apply Driver Package for multiple reason.
Jason | http://blog.configmgrftw.com | @jasonsandys

SCCM 2012 Windows Mobile 5.0

We have Windows Mobile 5.0 Handheld devices, I hope we can manage these devices using SCCM as it supports legacy management for Windows Mobile by mobile device legacy client. is my understanding is correct or is there any other way.

If you look at the supported configs doc here (http://technet.microsoft.com/en-us/library/gg682077.aspx#BKMK_MDMLegacy), you will see that only Windows CE 5.0 is supported.
If your Windows Mobile 5.0 handheld are not Windows CE 5.0, then they are not supported.
The chart says that the oldest Windows Mobile is 6.0.
Wally Mead

SCCM 2012: create user/group which can only import computers, reset pxe boots

Hi,
We would like to give helpdesk some basic rights so they can add computers (via mac/pc name) and reset pxe-boots.
We might grant extra rights but would like to start with these basic ones.
I know the setup is fully different (RBAC) so your feedback how you implemented this would be highy appreciated.
J.
Jan Hoedt

You can use "Custom Role Based Administration for Importing Computers" (http://blogs.technet.com/b/inside_osd/archive/2012/04/30/custom-role-based-administration-for-importing-computers.aspx)
as a starting point. Then use "RBA Viewer" (part of the toolkit) to create your own, custom roles.
Torsten Meringer | http://www.mssccmfaq.de

Deploy UDI Windows 10 with SCCM 2012 R2 and MDT 2013 Update 1

Hi,
Trying use "User-Driven Installation" with
SCCM 2012
R2 CU4 and MDT
2013 Update 1 for deploy Windows
10.
Created MDT Task Sequences with
template "Client Task sequence"
and Deployment Method "User-Driven Installation".
When I try to deploy I have error like:
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Part smsts.log
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Expand a string: WinPEandFullOS TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: smsswd.exe /run: cscript "%deployroot%\scripts\ztierrormsg.wsf" TSManager 22.04.2015 11:36:57 1160 (0x0488)
[ smsswd.exe ] InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
PackageID = '' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
BaseVar = '', ContinueOnError='' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ProgramName = 'cscript "C:\_SMSTaskSequence\WDPackage\scripts\ztierrormsg.wsf"' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
SwdAction = '0001' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Set command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Working dir 'not set' InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Executing command line: Run command line InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft (R) Windows Script Host Version 5.12 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Copyright (C) Microsoft Corporation. All rights reserved. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Microsoft Deployment Toolkit version: 6.3.8216.1000 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
The task sequencer log is located at X:\WINDOWS\TEMP\SMSTSLog\SMSTS.LOG. For task sequence failures, please consult this log. InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
ZTI deployment failed, Return Code = 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Unable to create WebService class InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Command line returned 5001 InstallSoftware 22.04.2015 11:36:57 1740 (0x06CC)
Process completed with exit code 5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
!--------------------------------------------------------------------------------------------! TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the action: Error in the task sequence.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionRetCode=5001 TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set a global environment variable _SMSTSLastActionSucceeded=false TSManager 22.04.2015 11:36:57 1160 (0x0488)
Clear local default environment TSManager 22.04.2015 11:36:57 1160 (0x0488)
Let the parent group (Gather Logs and StateStore on Failure) decides whether to continue execution TSManager 22.04.2015 11:36:57 1160 (0x0488)
The execution of the group (Gather Logs and StateStore on Failure) has failed and the execution has been aborted. An action failed.
Operation aborted (Error: 80004004; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
Failed to run the last action: Error in the task sequence. Execution of task sequence failed.
The operation cannot be completed because other resources are dependent on this resource. (Error: 00001389; Source: Windows) TSManager 22.04.2015 11:36:57 1160 (0x0488)
MP server http://sccm.domain.com. Ports 80,443. CRL=false. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting authenticator TSManager 22.04.2015 11:36:57 1160 (0x0488)
Set authenticator in transport TSManager 22.04.2015 11:36:57 1160 (0x0488)
Sending StatusMessage TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting message signatures. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Setting the authenticator. TSManager 22.04.2015 11:36:57 1160 (0x0488)
CLibSMSMessageWinHttpTransport::Send: URL: sccm.domain.com:80 CCM_POST /ccm_system/request TSManager 22.04.2015 11:36:57 1160 (0x0488)
Request was successful. TSManager 22.04.2015 11:36:57 1160 (0x0488)
Executing command line: X:\WINDOWS\system32\cmd.exe /k TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
The command completed successfully. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)
Successfully launched command shell. TSBootShell 22.04.2015 11:37:31 696 (0x02B8)

MDT Updates for Windows 10 Technical Preview Build 10041
Если Вам помог чей-либо ответ, пожалуйста, не забывайте жать на кнопку "Предложить как ответ" или "Пометить как ответ".
http://zalozny.com.ua

SCCM 2012: Windows update group gives invalid update

Similar Messages

Maybe you are looking for