SCCM Deploying Updates

I'm currently experiencing problems with deploying updates via SCCM. I have previously had this working however at the current time the clients show the notification that updates are available and also that they are installing however when I check the updates seem to hang at downloading. I have left if for well over an hour and still no updates start installing. This is occuring on the local network and only involves minor updates so I'm quite sure that it's not related to bandwidth. Any assistance would be appreciated.

Hello Michael,
I have read a few TechNet forums regarding the problem, take a look into those threads and see if they may realte to your problem:
https://social.technet.microsoft.com/Forums/systemcenter/es-ES/e28df083-c60a-4989-a92d-6e9e0cfdbb58/sccm-updates-stuck-downloading?forum=configmgrsum
http://www.danrichings.com/?p=100
https://social.technet.microsoft.com/Forums/systemcenter/en-US/70bcbf14-1613-4bfc-abf7-db609db59f4c/sccm-clients-stuck-downloaded-windows-updatesneed-help
If you are still having the problem, check for the boundaries, it is never too much to check for them, because if there is any problem related to them it is simple fix and it will help with the problem.
Also you can try to re-download the updates, I had a similar problem recently and it resolved this way.
Let me know if it helps.
Best regards!
Renato S. Pacheco  

Similar Messages

  • SCCM not able to deploy update ms14-008

    Hi Team, I am deploying software update with SCCM 2012 but I found one of them not able to deploy, it seems that it is only downloadable from MS download ctr and it is executable file. 
    https://technet.microsoft.com/library/security/ms14-008
    any advice how can I use sccm software update to deploy it instead of extracting a msi and don't know what collection to be target for deployment?
    thanks!
    Thanks and best regards, -- KF

    I don't think MS14-008 is published via WSUS. Hence there is a chance that it's not available in SCCM !
    What I can see : That convinces me 
    1. Nothing published in Microsoft Update Catalog website http://catalog.update.microsoft.com/v7/site/Search.aspx?q=ms14-008
    2. Nothing mentioned about WSUS and ConfigMgr in the linke https://technet.microsoft.com/en-us/library/security/ms14-008.aspx Detection
    and Deployment Tools and Guidance section !
    Anoop C Nair (My Blog www.AnoopCNair.com)
    - Twitter @anoopmannur -
    FaceBook Forum For SCCM

  • How to Disable SCCM Software Updates on Client Workstations

    Hi,
    I have enabled Software Updates for all clients, to create a baseline for reporting. The intent was to then disable Software Updates via. SCCM Client Settings, so that our clients could continue receiving updates from Microsoft until we were ready to deploy
    updates to our clients.
    After modifying the SCCM Client Settings, the Software Update Cycles/actions removed from the Configuration Manager Client on the workstations, however the local policy on the workstation remained configured (did not revert back to Non-Configured).
    and the workstation is still looking to the SCCM for Windows Updates.
    Using SCCM, how do I get the workstations back to Microsoft for Windows/Microsoft Updates?
    TIA,
    Bill

    >I've read that you shouldn't mix SCCM and Group Policy for Windows Updates, when you're intending
    to use SCCM.
    Correct - if you are using Group Policy to manage the Windows Update settings, ConfigMgr will not be able to manage them.  You're post implied you did not want to manage updates with ConfigMgr.
    > not all of our workstations are on a domain; so that's not really a complete solution for
    us.
    ConfigMgr is designed to easily configure devices to update against ConfigMgr, not Microsoft Update, so there isn't just a check box for what you want.
    Consider using ConfigMgr Compliance Settings to manage the registry keys for the Windows Update settings you are looking for on your devices.
    I hope that helps,
    Nash
    Nash Pherson, Senior Systems Consultant
    Now Micro -
    My Blog Posts
    If you've found a bug or want the product worked differently,
    share your feedback.
    <-- If this post was helpful, please click "Vote as Helpful".

  • SCCM Windows Updates - Client stuck on Downloading but never finishes

    I am running SCCM 2007 with 200 clients.  I have been sucessfully performing windows updates through SCCM without an issue for about 6 months.  Recently I approved updates released in March and most of the updates installed ok, but there are two, KB938464 and KB958690, which sit on status Downloading for hours until the desktop is switched off at night.  The times reach 14 hours on some machines.
    I have tried to cancel the updates by removing them from the Advertisements and from the Deployment packages but they still try to run everyday on 167 of 200 desktops.  If I manually go to Windows Update and install the updates the issue goes away, however, you can imagine my unwillingness to do this across 167 stations if I can avoid it. 
    How can I do one or both of the following:
    A) Cancel the updates so they no longer want to run on the clients
    B) Fix the issue so the updates download properly.
    The process that I use to approve and deploy updates:
    Under Site Database -> Computer Management -> Software Updates
    I select the updates I want to deploy and add them to a new update list.  I place a check into the box to download the files associated to the updates.
    Once the update list is built I select to deploy the updates, give it a name that represents the update period
    I select a template that deploys but suppresses restart in the updates.
    I select a deployment package, the same one I used for all my past updates
    Download from the Internet
    English
    Schedule
    Finish.
    This has worked sucessfully for months.
    Thank you for any help that can be offered. 

    I think you can use powershell command to modify the cache size
    Here is the link: http://thephuck.com/scripts/use-powershell-to-change-sccm-cache-directory-cache-size/
    $ColQuery = "select * from sms_cm_res_coll_SMS0005E"
    $CollectionMembers = gwmi -computername SCCM_Server -namespace root\sms\site_SMS -Query $ColQuery |sort Name
    foreach($comp in $collectionmembers){
    $server = $comp.name
    write-host -fore green `n`t "working on " $server
    $ccmcfg = gwmi -computer $server -Namespace root\ccm\SoftMgmtAgent -Class CacheConfig
    $ccmcfg.Location = "d:\path\to\cache"
    $ccmcfg.Size = "2048"
    $ccmcfg.Put()
    #stop service, sleep for 10s, start the service
    Get-Service -computer $server ccmexec | Stop-Service
    Start-Sleep 10
    Get-Service -computer $server ccmexec | Start-Service
    write-host -fore green `n`t "finished" $server

  • New SCCM deployment for 10,000 users, single domain across 2 sites connected with a fast WAN link

    Hi,
     I'm looking at rolling out an SCCM 2012 deployment in my environment. We have 10,000 users, a single AD domain, several thousand Windows 7 laptops and desktops, as well as few hundred MAC OS 10.6 devices and we currently use WSUS for updates. We have
    2 main sites with the users equally split across the sites and we have an internal PKI. 
    I'm looking at doing the following:
     - deploying a single primary SCCM 2012 site server (site A)
     - 1 or 2 distribution points in site B
     The main things I'm after are:
     - Computer inventory (MAC + Windows)
     - Application deployment (MAC + Windows)
     - Hardware inventory (MAC + windows)
     - Deploy updates (MAC + windows)
     - Remotely power on devices and patch overnight 
    I'm aiming to setup an SCCM infrastructure and aim to achieve the above in a month.
    What I'm not sure about is:
    - if I need a secondary site server?
    - How I should handle WSUS updates ? I don't know if SCCM can leverage the current WSUS infrastructure or whether it's better just to get rid of it and install the WSUS role as part of SCCM?  
    - I believe that to enable application deployment for MACs I need to install a PKI certificate on my distribution points. If do I this, presumably all my Windows clients will also connect via HTTPs. Are there any downsides to doing this?
    If anyone has deployed a similar setup I'd be keen to hear from them.
    Thanks in advance

    1. WSUS: Be careful here. If you just remove the WSUS policy computers can just revert back to their default setting which would be to connect to the Internet at 3am and automatically install the updates. I've seen this happen on a large site and it is not
    pretty. It's better practice to leave the policy in place but to disable automatic updates (or you could change the WSUS server to be your new ConfigMgr WSUS instance - this would have the same effect).
    2. Secondary Sites: It's not uncommon for customers to start without the secondary site and monitor the WAN link for excessive traffic. The secondary site can be introduced afterwards if it is deemed neccessary.
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • SCCM Software Update's / ADR questions

    Hello Technet/SCCM community,
    after much scratching of the ol' noggin and lots of internet searches I have been left with a handful of questions regarding SCCM 2012 SP1 and its Software Update Point functionality with emphasis on Automatic Deployment Rules.
    1.When creating an ADR if one ADR's updates are the same as another ADR's updates how can we avoid storing/downloading duplicates? Can I store the updates in the same folder and will SCCM be smart enough to share the updates rather than having two copies?
    note: one way around the above would be to separate updates into different ADR's, here is my issue with this method: lets say I have one ADR for Win7 updates and one for Office2013/Silverlight etc. Now Im deploying multiple packages to machines causes a
    larger update window and possible multiple restarts. So lets say I suppress the restarts, well when users get around to it they will still see the updates being applied and per our policy we have one window to push these and when we wander from the norm users
    minds break. i.e. I don't want multiple ADR's deployed to the machines a month and I do not want to suppress restarts.
    2. Is there no way to only download the metadata of these updates? Currently updates for my environment are eating up 80 gigs of hard drive space. 40 gigs to the download location which then gets duplicated to the content library which sets me up for my
    next question: Why are these updates in both locations essentially doubling the HD space you need for updates. My content library grows gig for gig with my SUP updates store.
    3. Scenario: I deploy updates month 1, 100 updates are downloaded and deployed and update group entry is created. Next month I deploy again this time 50 updates are downloaded and deployed, update group 2 created. Questions: Now if I delete update group
    1 and do not have a date released or revised rule will the next deploy grab update group 1's updates again? In other words should I always leave the update groups in SCCM so it knows what updates have been deployed and wont download those updates again. And
    finally if I should leave the update groups can I still delete the updates from the folder freeing up space but still allowing SCCM to know whats been deployed?
    4. Does anyone have an essential Windows 7 workstation updates ADR build they can share. For Workstations I like to deploy everything they need in one ADR, Office 2013, Silverlight, SCEP, and WIN7. So far Ive never come close to the 1000 limit. Server ADR's
    are a different story.
    MichaelSpaulding

    I appreciate your clarification of an ADR, I understand what it does and doesn't do, I'm simply using the term ADR to cover the subjects I'm discussing. 
    This piece of your response answers my questions in full and is very helpful.
    "You can use the "Period of time for which all pending deployments with deadline in this time will also
    be installed" setting on the Software Updates tab to group deployments together that have slightly different deadline times; however, Office 2013 and SCEP updates generally don't require a reboot."
     I had previously set the deadline/restart window to "as soon as possible", I will utilize
    the above to resolve my issues with my ADR deployments and I will also use the below for how I group updates. 
    "I generally configure an ADR for all workstation OS updates, one for Office, one for Server updates,
    and one for SCEP. These all reference the exact same update package which I then change on a periodic basis like every 6-12 months. I also create new update groups month for each of these (except SCEP defs)."
    Thanks great stuff Jason:)
    MichaelSpaulding

  • Deploying updates - required question

    When I am looking to deploy updates in SCCM.  If for an update the required column is "0"...does that mean that update is not needed on any of the computers on my network?  
    If yes does that mean I should not deploy that update to my environment?

    That indeed means that it's not required by any of the systems that performed a recent scan. If your not planning on creating situations where the update would be required then you don't have to deploy the update.
    Keep in mind that a client will only download and install updates that are deployed and required on that client.
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • What is the best way to deploy/update custom security realm classes to WLS 6.0?

    From the WLS 6.0 console, I see that I can specify the Java class that
    implements my custom security realm but I am wondering what is the best way
    to deploy/update this code. I don't see a way to do this from the console.
    Does this mean that I have to manually copy the class files over that
    implement my custom security realm?

    Thanks Danut,
    A jar file seems to be a good way to package it up but it sounds like it
    still needs to be manually copied to each Weblogic server install directory
    post-installation and whenever it is updated. I thought it would be nice to
    be able to deploy/update the custom security realm by uploading it through
    the Console just as you can with web applications and EJBs.
    Brian
    "Danut Prisacaru" <[email protected]> wrote in message
    news:3aba2db0$[email protected]..
    You have to have your Custom Realm class in the class path. I usually havea
    jar file with all the Custom Realm classes and that jar I copy it in thelib
    folder. Then I modify "startWebLogic.cmd" and I add to the classpath
    ".\lib\CustomRealm.jar"
    set
    CLASSPATH=.;.\lib\weblogic_sp.jar;.\lib\weblogic.jar;.\lib\CustomRealm.jar;
    >
    Be aware that in order to have you custom realm besides creating thecustom
    realm using the console you also have to create a custom caching andchoose
    that one as your default caching realm.
    Here is how the security settings are looking in my "config.xml"
    <CustomRealm Name="CustomRealm"
    RealmClassName="Custom.appserver.weblogic.security.CustomRealm"/>
    <CachingRealm BasicRealm="CustomRealm" CacheCaseSensitive="true"
    Name="CustomCachingRealm"/>
    <Realm CachingRealm="CustomCachingRealm" FileRealm="wl_default_file_realm"
    Name="wl_default_realm"/>
    <FileRealm Name="wl_default_file_realm"/>
    <Security GuestDisabled="false"
    Name="mydomain" PasswordPolicy="wl_default_password_policy"
    Realm="wl_default_realm"/>
    Danut

  • Where do we go or how we i get the MSI file for SCCM deployment?

    We are just starting out on the SCCM deployment to our machines and a few of them requires Acrobat Pro X,  I have the .exe but I can not find the .msi.  If this available for the product where do I go to get the MSI?

    Hey clairec74674546,
    Please refer the below mentioned link for the same and see if this helps:
    Acrobat XI Deployment Guide for Large Firms
    Let me know.
    Regards,
    Anubha

  • SCCM Software Update Report

    Hi
    How can I make a report by sccm from installation of updates security and critical Microsoft productions?
    Best Regards

    Duplicate post of
    http://social.technet.microsoft.com/Forums/systemcenter/en-US/bd4ab8df-c94d-4a6e-833a-d0916c65a1fc/sccm-software-update-report?forum=configmgrgeneral
    http://www.enhansoft.com/

  • Weblogic.deploy update -- and that null message

    So, does anyone else receive an inexplicable error message when running "weblogic.deploy update" in version 6.0, stating that a "java.lang.NullPointerException" has been thrown?
    The update occurs anyway, but seeing a message like this is always disconcerting. Anyone have an idea why this is happening?
    (The exact trace that I receive is cut-n-pasted below.)
    T Fenstermaker
    Online Resources
    McLean VA
    java.lang.NullPointerException
    at weblogic.deploy.deployApplication(deploy.java:383)
    at weblogic.deploy.deploy(deploy.java:340)
    at weblogic.deploy.runBody(deploy.java:219)
    at weblogic.utils.compiler.Tool.run(Tool.java:81)
    at weblogic.deploy.main(deploy.java:954)

    If you use the -debug setting with weblogic.deploy you get more
    info. I'm deploying an .ear file, deployment works if I use the
    console, and if I just copy the ear file to the domain and WLS
    autodeploys.
    I getting the following error.
    [java] java.net.MalformedURLException: unknown protocol: d
    [java] at java.net.URL.<init>(URL.java:480)
    [java] at java.net.URL.<init>(URL.java:376)
    [java] at java.net.URL.<init>(URL.java:330)
    [java] at weblogic.deploy.parseSource(deploy.java:539)
    [java] at weblogic.deploy.init(deploy.java:299)
    [java] at weblogic.deploy.runBody(deploy.java:214)
    [java] at weblogic.utils.compiler.Tool.run(Tool.java:81)
    [java] at weblogic.deploy.main(deploy.java:1036)
    [java] javax.management.InstanceNotFoundException: harmony
    [java] at weblogic.rmi.internal.AbstractOutboundRequest.sendRecei
    OutboundRequest.java:90)
    [java] at weblogic.management.internal.AdminMBeanHomeImpl_WLStub.
    minMBeanHomeImpl_WLStub.java:1147)
    [java] at weblogic.deploy.findMBean(deploy.java:815)
    [java] at weblogic.deploy.findApplicationMBean(deploy.java:804)
    [java] at weblogic.deploy.deploy(deploy.java:312)
    [java] at weblogic.deploy.runBody(deploy.java:222)
    [java] at weblogic.utils.compiler.Tool.run(Tool.java:81)
    [java] at weblogic.deploy.main(deploy.java:1036)
    [java] java.lang.NullPointerException
    [java] at weblogic.deploy.deployApplication(deploy.java:420)
    [java] at weblogic.deploy.deploy(deploy.java:367)
    [java] at weblogic.deploy.runBody(deploy.java:222)
    [java] at weblogic.utils.compiler.Tool.run(Tool.java:81)
    [java] at weblogic.deploy.main(deploy.java:1036)
    [java] Java Result: 1
    "T Fenstermaker" <[email protected]> wrote:
    >
    So, does anyone else receive an inexplicable
    error message when running "weblogic.deploy
    update" in version 6.0, stating that a
    "java.lang.NullPointerException" has been thrown?I take it from the lack of response that the answer to
    this question must be either:
    a) No, no one else receives this inexplicable error, or,
    b) Yes, everyone else receives this inexplicable error
    and it's so well known how dare I ask.
    Anyone want to give me a clue which of these two is correct?
    T Fenstermaker
    Online Resources
    McLean VA

  • SCCM 2012 updates stuck on device

    Hi all,
    I have problem with SCCM 2012 updates on two machines. I have published security updates on all devices in collections without any problems. Till last week. On two devices, process of downloading has been stuck on 50%, 66% or 78%.
    Could I ask you how I should start troubleshooting this problem (I'm still "new" in SCCM topics).
    Thank you for any ideas and advices.
    Cheers!

    Pls check the logs
    http://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SU_NAPLog
    Check these discussions
    http://social.technet.microsoft.com/Search/en-US/?query=stuck%20downloading&rq=meta:Search.MSForums.ForumID(7f829d1c-2fc5-4e76-aadc-a118080ff523)&rn=Configuration+Manager+Software+Updates+Management+Forum
    Thanks, Prabha G

  • SCCM Software Updates (and SCUP) vs. Application Management for 3rd Party Application Patching

    Hi,
    We're getting ready to tackle the phenomena known as Java patching, and I was wondering if I could get your personal preference; SCCM Software Updates (and SCUP) vs. Application Management for 3rd Party Application Patching?
    I probably should give a little background on my environment; It's a university atmosphere, so unless it's policy, you have to ask nicely...can't tell people to do things they don't want to; multiple version of required versions of Java for what ever reason,
    which need to be identified, grouped together, and then upgrade as much as possible without breaking their old applications.
    I was thinking that Application Management probably made more sense where it is more robust, especially for removing multiple installs of Java on a single system, but Software Updates/SCUP looks like it was built for this type of patching, so I'm a bit confused
    why SCCM would have two components which essentially did the same thing.
    Your thoughts?
    Thanks,
    Bill

    For Java version management specifically you can already achieve a lot by using the Application Model in CM12.
    You can define supersedence between the different versions, just make sure to opt for uninstall of the older version when defining it.

  • SCCM 2012: update client machine policy via powershell?

    Hi,
    Does SCCM 2012 R2 have powershell command built-in to trigger update actions of SCCM client (update machine policy etc)?
    J.
    Jan Hoedt

    To update client machine using Power Shell, you can check below link
    http://blogg.alltomdeployment.se/2014/02/howto-force-remote-clients-to-update-their-sccm-clients-machine-policy-retrieval-evaluation-cycle-via-powershell/
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • SCCM deployment Win7 with multi language pack & software update languages

    In our company we have a running SCCM infrastructure and deploy Windows 7 x64 (en) with all language packs. Now we integrate the software updates management process into SCCM.
    My question is: Do we need to download and synchronize the software updates in all available languages or is English enough?
    Thank you very much for your support!

    Hi,
    We don’t suggest deploying all language packages in one time. You may deploy default language and let users choose which language
    package to install in Windows Update to save the network traffic.
    Regards,
    Sabrina
    This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question.
    This can be beneficial to other community members reading the thread.

Maybe you are looking for