SCCM Patch Deployment Severity and Update Classifications

SCCM 2012 SP1
I'm a little confused by MSFT terminology
http://support.microsoft.com/kb/824684/en-us versus terminology used in setting up an automatic deployment. Let's use Lync 2010 as an example. I wish to deploy Lync 2010 updates outside of our regular patching via SCCM as I don't have Update
Classification None set so I don't capture a whole bunch on non-essential patches.
When I look at current Lync client update:
http://support.microsoft.com/kb/2815347 I don't see the classification MSFT used on their terminology page so not 100% know how to target it. It indicates its an UPDATE package but I don't see a SEVERITY level assigned. So if I use the
following search criteria would this work?
Date released: Last 3 months
Product: Microsoft Lync 2010
Severity: None
Update Classification: Updates

Similar Messages

Deploying extension and updates

Hi!
Hoping to get some tips on how to properly handle this scenario:
I'm developing a solution that consists of two plugins and several CSXS Extensions for Adobe InDesign CS5-CS55-CS6.
I need to be able to control the installation and future update pushes for every mac that uses my solution.
I could do it in the plugin C++ code (downloading and updating each component separately) but I want to know if there is a way to do it via the Extension Manager.
How much flexibility can it offer?
Can I push updates only to certain installations or users?
Any hint would be greatly appreciated.

They're listed by Apple - & downloaded from the developer's website
Extensions can modify the appearance and behavior of Safari, and access your private information at websites. Apple is providing links to these extensions as a courtesy, and makes no representations regarding the extensions or any information related thereto. When you download and install an extension, the file is delivered by the developer, not by Apple. Some of the extensions listed here may require payment to the developer for use of the extension; this transaction is between the user and the developer. Any questions, complaints, claims, or support requests regarding an extension must be directed to the appropriate software developer.

Windows 2008 R2 Server without Service Pack 1 was flag "Not Required" during the SCCM patching/deploying SP1 for 2008

Dear Brothers,
I come to a scenario were one of our Windows 2008 R2 Server without Service Pack 1, was Flag under SCCM 2007 Reports Update Status for Service Pack 1 deployment to be "Not
Required" which definitely inaccurate.
What I want to know what are the conditions for the Software Update to send a status to SCCM Server that the Service Pack is “Not
Required” instead of the other way around?
Is there anyone that can guide me to any KB Article regarding this behavior?
Regards,

Yes, I know this is an old post, I’m trying to clean them up. Did you figure this out, if so how?
I have seen this before and what I have done is manually applied the SP1 to the server. Only then did the error show up as why SP1 didn’t apply. After fixing the error, CM was apply to apply SP1 and other SU to the server.
http://www.enhansoft.com/

Report SCCM Patch Deployment - Wrong Result

Hi all,
After the departure of one of my teammate, I discovered that one SCCM report that he had created is not correctly setup. The result given by this report and more precisely the result in the column called "Successfully installed update" is wrong.
We have approximatively 850 computers ...So for one KB, difficult to have1428 computers ok.
I tried to figure out SQL query created by my teammate but I'm not really a sql expert.
I can not find where could be the problem.
It's really annoying because this report is very usefull (when statistic is correct)
Could someone help me regarding a possible mistake in this SQL query ? ... thanks for your help
SQL Query:
SELECT     COUNT(v_R_System.Name0) AS NbComp, SRSN1.StateDescription AS Compliance, v_UpdateCIs.BulletinID, CustomSeverityReference.CustomName AS Criticity, SRSN2.StateDescription, v_UpdateCIs.ArticleID
FROM         v_UpdateCIs
    INNER JOIN v_CIAssignmentToCI ON v_UpdateCIs.CI_ID = v_CIAssignmentToCI.CI_ID
    INNER JOIN v_UpdateAssignmentStatus
    INNER JOIN v_CIAssignment ON v_UpdateAssignmentStatus.AssignmentID = v_CIAssignment.AssignmentID
    INNER JOIN v_R_System ON v_UpdateAssignmentStatus.ResourceID = v_R_System.ResourceID
    INNER JOIN SR_StateNames AS SRSN1 ON v_UpdateAssignmentStatus.LastComplianceMessageID = SRSN1.StateID AND SRSN1.TopicType = 300
    INNER JOIN SR_StateNames AS SRSN2 ON v_UpdateAssignmentStatus.LastEnforcementMessageID = SRSN2.StateID AND SRSN2.TopicType = 301 ON v_CIAssignmentToCI.AssignmentID = v_CIAssignment.AssignmentID
    INNER JOIN CustomSeverityReference ON v_UpdateCIs.Severity = CustomSeverityReference.SeverityID
WHERE     (v_CIAssignment.AssignmentName LIKE @ComputerType) AND (NOT (v_CIAssignment.AssignmentName LIKE @currentMonth)) AND (v_R_System.Obsolete0 = '0')AND (v_UpdateCIs.IsDeployed = '1') AND (v_UpdateCIs.IsExpired = '0') AND (v_UpdateCIs.IsSuperseded
= '0')
GROUP BY SRSN1.StateDescription, v_UpdateCIs.BulletinID, CustomSeverityReference.CustomName, SRSN2.StateDescription, v_UpdateCIs.ArticleID
HAVING      (v_UpdateCIs.BulletinID <> '')
Report:

You can close this thread even if no solution was found.
if you still have not get this to work correctly then I would suggest hiring a consultant to help update the report. SU reports are among the hardest to write and can take days / weeks to get right.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

SCCM 2012 Deployment Packages and Applications deployment order

Hello I have an application which deploys Office 2013 through SCCM 2012 I then want to copy some templates to two directories in Office. I have added a script the OFC tool which is suppose to run after the install. But the files don't appear. If I run the
same script manually all the files are copied. I ended up creating a package just for the Office Template files, but I have to run this manually afterwards. Should I Persist with the script or is there a way to run the package automatically after the application
deployed has run?

Sounds like best solution is to create an MSI that can copy the template files and deploy as an application after Office Install. Is this something I can do in Install Shield?
Seems weird that they would have an option in the MSP to run a script but it doesn't work.
I wouldn't go to that trouble myself, but that's because I don't author MSIs as part of my role (we have a packaging team who do that task, and they seem to regard authoring an MSI as the solution for everything ;)
the ConfigMgr AppModel happily caters for all kinds of payloads, despite referring to them as "applications" there is no requirement for the payload to be an MSI.
MS have long documented that the "run scripts" and "chaining" features of the Office setup engine are "not robust" (i.e. not very tolerant, are a one-shot kind of thing). Some seem to work just fine, others have no joy with it. I don't use it myself, there
are plenty of other methods, but I find it comes down to what you are comfortable/confident/familiar with. Everything has pros and cons, and above all else, I've found that it's my/our assumptions/understandings that tend to be why things go off-course.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Problem in creating and updating of material by the use of bapi and bdc

Hello All,
I am using bapi (BAPI_MATERIAL_SAVEDATA ) and than bdc to create and update classification data of material.
I am facing a problem.
1) firstly I am creating material by the use of bapi and than after creation i want to update classification data for taht perticular material .
2) To update classification data i am using bdc . while at the time of updating material through bdc system showing me error that material is currently locked by user (my login name ).
Please suggest what to do.
Tkank you
With Regards
Shantanu Modi

When u update/create data it takes sometime to commit. So after using BAPI
give 10 minutes wait in ur program before updating classification data.
you can write like
wait up to 20 seconds.
and update the classification.

Deploy Java and Oracle updates using SCCM 2007 Software Updates

Hi Team,
I am using SCCM 2007 to deploy software updates on all my servers. Now i want deploy updates fro third party tools like Adobe, Java etc..Please suggest me on how to deploy these updates using SCCM.
I am looking for other simple solution than SCUP 2011. Please suggest.
Thanks
Siva

Hi,
SCUP 2011 would be the way to do it or a package/program. There are commercial software solutions that plugins to configuration Manager like Secunia
http://secunia.com/vulnerability_scanning/corporate/sc2012_plugin/ ,Solarwinds
http://www.solarwinds.com/patch-manager.aspx and Shavlik
http://www.shavlik.com/products/scupdates/ that offer a subscription of updates for these products for a cost of course.
Regards,
Jörgen
-- My System Center blog ccmexec.com -- Twitter
@ccmexec

Windows Updates constantly failing and reverting after SCCM 2012 R2 pushes out updates

Hi folks,
I wonder could anyone help me with a strange problem I am having!
We use SCCM 2012 R2 and I am trying to roll out updates to a Windows 2008 R2 Standard 64 bit server.
When I deploy the updates to the server they get to the server and install but during the reboot it says Windows Modules Installer for a while then shows the failure configuring Windows Updates, reverting changes screen.
I’ve tried the suggestions of disabling 'Windows Management Instrumentation' and 'Windows Modules Installer' and renaming the repository folder but still no joy.
If I use Windows Update to install the updates the updates do go on but then when I add it to the collection in SCCM to push out the patches it sees the server as if the updates aren’t installed and begins doing the installs.
After the patches installs using SCCM and when the server is rebooted it goes back into the loop of saying Windows Modules Installer and reverts the updates and strips out the patches again.
I was hoping that when the Windows Updates were installed via Windows Update and once I put the server into the collection to push out the updates to the server it would have shown that the updates are already installed on the server and show that server
as being compliant in SCCM but unfortunately that isn’t happening.
It sights a couple of errors in the Setup event logs on the offending server: -
For multiple patches - Package KBXXXXXXX failed to be changed to the Installed state. Status: 0x80070643
For multiple patches - Initiating changes for package KBXXXXXXX. Current state is Invalid Resolved. Target state is Installed. Client id: WindowsUpdateAgent.
After doing some research,
0x80070643 refers to a .Net Framework issue so I’ve ran a .Net Repair tool but that didn’t work either so I’m running out of ideas so any help would be greatly appreciated on how I can get this sever updated using SCCM and showing as compliant.
Thanks,
Bonemister

Hi Torsten,
Thanks for your reply!
I was afraid you were going to say that as it just doesn't make sense that when I install the update using Windows Update via the Ire-nternet and when the install and re-scan no updates are required. It is only when I ask SCCM to check for patches
that it sees updates are missing and installed the updates before the OS reverts when.
Is there a way in SCCM to remove the record of what patches have been installed onto a particular server? I tried deleted the server out of SCCM then applying the Windows Updates via the web then added the server back into SCCM and see did it pick
up the newly installed updates on the server.
The thing is I don't think that WindowsUpdate.log will show any failures as Windows update is showing as no more updates required. It is just when SCCM installs that patches that the problem happens so that is what is leading me to think it is an SCCM
problem.
My main goal is to get the updates into the server and for it so show as complient!
I'll check back through the even logs again. Are they any SCCM logs that show patches failing to install and why?
Thanks again,
Bonemister

SCCM patches-Adobe product updates

I am looking for information on how to configure SCCM for Adobe product updates. I've been told that SCCM can only be used to deploy 'major' Adobe updates, i.e. Adobe Reader version 9 but not 9.1, 9.2, etc. Is this true? I can't imagine that companies are updating their Adobe products (Shockwave player, Flashplayer, Reader) one computer at a time. If anyone can direct me to any technical resources on how to configure Adobe updates with SCCM, I'd appreciate it so I can work together with our Network Administrator to send out updates regularly. Thank you.

Hi,
SCCM 2007 is the next version of SMS(2003) and can be used for patch management also alongwith software distribution, operating system deployment, network access protection, and hardware and software inventory.
But it is recommended that you deploy the updates through SCUP/WSUS to SCCM. For that you need to setup a WSUS and SCUP along with SCCM server. WSUS is used to publish Microsoft updates to SCCM. For custom updates (from Independent S/W vendors) you need SCUP which will sync with WSUS and then the updates are available at SCCM.
You need to get the catalog for Acrobat/Reader and publish them through SCUP to WSUS. SCCM will sync the updates from WSUS. From SCCM the updates can be deployed to various clients.
Thanks,
Vinod

OS and DB Security patches and updates

Dear Experts,
We are going through SOX audits. Auditor is asking me about applied latest OS and Oracle patches to secure SAP systems from threats and attacks.
I told them that we are running on Solaris 9 with Oracle 9.2.0.5
and our severs are behind CHECKPOINT Firewall, and also we have never faced any security breaches and threats and also not facing any performance and efficiency problems in our system.
However, they still persist me about critical security patches for Solaris and Oracle.
Please tell me should I go for applying security patches of Solaris or Oracle if any. I am very worried about possible problems after applying of those security patches.
Please guide me about this issue and tell me about proven and trusted security patches for Solaris 9 and Oracle 9.2.0.5
Best Regards
Waqas Ahmad

> I told them that we are running on Solaris 9 with Oracle 9.2.0.5
First I would like to tell you that your current Oracle version is out of extended support (see SAP on Oracle and the notes the first chapter points to). To get actual (security) patches I would highly recommend upgrading to 10.2.0.4.
> However, they still persist me about critical security patches for Solaris and Oracle.
They do that because most of the "attacks" to server come from internal users, not from external.
> Please guide me about this issue and tell me about proven and trusted security patches for Solaris 9 and Oracle 9.2.0.5
For the operating system I would use pca (Patch Check Advanced) - a free too to download and install patches - works like charm (http://www.par.univie.ac.at/solaris/pca/). It can be configured to only download and install security relevant patches.
For Oracle you should install the latest patchset (for 9.2 it's 9.2.0.8 and all the necessary interim patches) and the critical patch updates. However, those CPUs may conflict with necessary other patches so you can either use CPU or the necessary interim patches.
Check note 938986 - Oracle Database 9.2: Patches for 9.2.0
Markus

Deploying a Windows update MSU-file in SCCM 2007

Hi all,
we have SCCM 2007. I have a Windows Update file that i need to deploy via SCCM. Its a file with the extension msu. Do i need to convert it to an exe file? If so, how would i be able to do it?
Please advice. Thank you.
Tram

Hi,
You don't need to convert the update, you use WUSA.exe with the MSU file eg. wusa.exe Windows6.0-KB934307-x86.msu /quiet
Take a look at these two articles they explain how to distribute the file:
http://support.microsoft.com/kb/934307/en-US
http://blogs.msdn.com/steverac/archive/2009/01/17/how-to-install-sccm-patches-manually-on-vista-server-2008.aspx
Kent Agerlund

Deploy all software updates using SCCM task sequences

Hi, we are using System Center Configuration Manager 2012 R2 and I want to include software update installation part within the OSD.
So far I tried below links but not able to make it work:
https://technet.microsoft.com/en-in/library/bb632402.aspx
http://www.gerryhampsoncm.blogspot.ie/2013/04/sccm-2012-sp1-step-by-step-guide-part_5.html
http://dptechjournal.blogspot.in/2014/04/weekly-lab-patching-task-sequence.html
https://social.technet.microsoft.com/Forums/systemcenter/en-US/b525aafc-b613-49a2-9015-3ae1c2db2e01/applying-software-updates-through-a-task-sequence
Can someone help me with this please?
~VST
~VST

Hi,
Please provide more information. If the task sequence failed to run, you need to check smsts.log and update logs on the client.
https://technet.microsoft.com/en-us/library/hh427342.aspx#BKMK_SU_NAPLog
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Deploying SCCM EndPoint Protection Client with updates?

Am using SCCM 2012 r2 and need to get the EndPoint Protection Client built int o my image.
If I deploy it post-imaging the laptop, how do I get the latest definitions?
Because it shows up with a red icon in the system tray and I have to go in and manually update the definitions after I install it.
Is there a task that could be done in an OSD to update the definitions?
Otherwise only way I can think of is preinstall and update and get the full scan done before capturing an image of my system to deploy to other systems.

Hi,
If you use Endpoint Protection on all computer including the latest definitions in your Build and Capture saves time.
Otherwise ,the command line in windows works fine ,trigger an update of SCEP at the end of the task sequence:
"%Program Files%\Microsoft Security Client\mpcmdrun.exe" -SignatureUpdate
Here are some great articles for you reference:
Operating System Deployment and Endpoint Protection Client Installation
http://blogs.technet.com/b/configmgrteam/archive/2012/04/12/operating-system-deployment-and-endpoint-protection-client-installation.aspx
How to Configure Definition Updates for Endpoint Protection in Configuration Manager
http://technet.microsoft.com/en-us/library/jj822983.aspx
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I want to share Microsoft word from my desktop mac to my laptop but every timeIi try and do it, it says that it can't open because it is not supported by the software. I have tried several times and updated it on the mac but its still not working.

I want to share Microsoft word from my desktop mac to my laptop but every timeIi try and do it, it says that it can't open because it is not supported by the software. I have tried several times and updated it on the mac but its still not working. Any ideas?

You need to install Office on the computer from the installer DVD or disc image you purchased.

How to maintain several views of the same data and update a tree

I have an object UiUser, which is displayed in my application in several different views. There are three different views which all have the User object i.e. search results, user tree and user table. Each of the views has the same menu items, so the user can be deleted from any of the views.
What I am trying to work out is how should I ensure the item is updated in all of the views?
I can fire a property change event with the UiUser and update two of the views i.e. search results and user table, but how do I update the tree?
I thought of overiding the equals/hashcode methods of the UserTreeNode to compare uiUser.getId () and I could then search the tree and find the tree node of the required UiUser. But I have reservations about this whole approach as it just seems wrong.
Any ideas of how to keep N views in sync, I really don't want all of the views to have tree nodes as this equally seems wrong. This should be a simple problem to solve and I'm sure lots of people have done it, I'm just not sure which is the best approach to take.
Thanks

Hi Jan,
This is so because each installer has a GUID that is used to check whether the application needs to be upgraded or not. (It's a Microsoft function).
What you can do is create a new installer with a different GUID (copy the installer in the projects), and check witha text editor whether this GUID has changed.
But any specific reason you need two seperate installs? You can run the application twice with a specific INI token:
allowmultipleinstances=True
Ton
Free Code Capture Tool! Version 2.1.3 with comments, web-upload, back-save and snippets!
Nederlandse LabVIEW user groep www.lvug.nl
My LabVIEW Ideas
LabVIEW, programming like it should be!

SCCM Patch Deployment Severity and Update Classifications

Similar Messages

Maybe you are looking for