Software update group install deadline and reboots for them
If I make a group of updates available at 2am Sunday, with the deadline set to 6am Sunday, I have two questions.
This means for any machines turned on they will install at 6am and for any other machines checking in after that they will install immediately, correct?
how do i find out when SCCM will force the reboot of the machines to complete the installation? is it 24 hours by default or is that set somewhere I should double-check?
Correct to your first question although there is a random, up to 1 (or 2, I never remember) delay after the deadline to avoid swamping the infrastructure.
It will initiate the reboot countdown after the last update is installed and then enforce the reboot at the end of that countdown. By default, the countdown is 90 minutes. This can be changed in a client settings package.
Jason | http://blog.configmgrftw.com
Similar Messages
-
Software Updates wont install - it just reboots when try to
Hi!
Suddenly after no problem since 2007 I have this issue that when updates are presented via Software Updates, those updates that i have to click on "restart" button, wich loggs me out and then the updates supposed to install - but! Before they install the system just reboots as if the updates couldnt install and then my Mac just reboots. So for a time now i have to install the updates manually, wich is annoying.
Anyone heard of this before? Tried to repair permissons but no luckRepair permissions is in Applications -> Utilities -> Disk Utility under the First Aid section. You have to select the hard drive icon within Disk Utility to get Repair permissions to be possible to select. Most updates don't need it. Occasionally when you install new software issues may arise that make permissions go bad, which affects future software updates. This is the pitfall of using any third party software that most users learn about. It might never progress because of permissions, or a hard disk that is too full, or a corrupt download if you don't have high speed internet to get it from.
-
All Software update groups expired
Hi,
Please see http://social.technet.microsoft.com/Forums/en-US/39b60e34-f30a-4963-a08b-6a8e13e44b91/software-update-groups-grey-icon-with-x-?forum=configmanagersecurity
for reference.
We created update lists for Windows 7 with Office, automatic updates for SCEP, they all are expired (Expired icon of “http://technet.microsoft.com/en-us/library/hh848254.aspx). I don’t want them to expire. I want to make sure every new
OS will get the latest updates + antivirus updates.
Not sure if this is by design, an error on SCCM (http://social.technet.microsoft.com/Forums/en-US/0c13c27d-55a9-4f56-8ac0-f9053301ab0c/all-updates-in-sccm-software-updates-are-set-to-expire?forum=configmgrsum=>
my SCUP is there) or there is some misconfiguration.
Please advise. J.
Jan HoedtJan,
> *Can you help me with this mechanism, I'm not familiar with it?
While viewing the updates that are a member of the software updates group, either sort by the "Expired" column or filter by Expired = Yex. Select all expired updates, right click, and select 'Edit Membership". Uncheck the checkbox for the software
update groups you are trying to remove them from.
> *I seem to remember there was somewhere an option that mentioned expired
This option has to do with how long 'superseded' updates will remain available for deployment. You can set under Administration > Site Configuration > Sites. Right click on your site and select Configure Site Components > Software Update
Point. The setting is on the "Supersedence Rules" tab.
However, Microsoft will also directly expire updates from time to time as well. In general, this is normal and something you shouldn't worry about managing. When the update has been expired by Microsoft, it is something you couldn't install even
by going to Windows Update, so you shouldn't worry trying to deploy them. Instead, deploy the current updates instead of superseded ones.
>How can I automate this (not automatically apply but using manually which updates to use and deploy at times I choose)?
For organizations with very simple Software Update processes, you could use an Automatic Deployment Rule to select updates based on a criteria, download the content to a deployment package, add the updates to a software update group, and create a deployment
to a collection. That deployment can be 'available' and not required if you plan to hand install them later.
This documentation gives you an overview of how all the Software Update Management features work:
http://technet.microsoft.com/en-us/library/gg682168.aspx#BKMK_DeploymentWorkflows
And this blog post gives an example of using an ADR:
http://blogs.technet.com/b/configmgrdogs/archive/2012/05/08/configmgr-2012-automatic-deployment-rules.aspx
I hope that helps,
Nash
Nash Pherson, Senior Systems Consultant
Now Micro -
My Blog Posts
If you've found a bug or want the product worked differently,
share your feedback.
<-- If this post was helpful, please click "Vote as Helpful". -
Collections based on Software Update Group compliance
Hi!
Is it possible to create a collection based on software update group compliance? This is for software update groups which are
not deployed, they are just monitor groups (for example, groups for yearly or quarterly software update compliance).
I would like to create a collection that lists all devices which are non-compliant in software update groups with names like "%Client Updates" - is this possible?
The reason for this is so I can impose some stricter Compliance Settings (among some other stuff) on devices that are not compliant.
I looked around a bit, but I could not find anything that I can use. Even Google couldn't solve my question :/you can try something like this:
This collection is basically sub selected query get list of computers that do not have specific assignment enabled.
select * from SMS_R_System where SMS_R_System.ResourceId not in (SELECT distinct SMS_UpdateComplianceStatus.MachineID FROM SMS_UpdateComplianceStatus JOIN SMS_UpdateDeploymentSummary ON SMS_UpdateComplianceStatus.CI_ID = SMS_UpdateDeploymentSummary.CI_ID
WHERE SMS_UpdateDeploymentSummary.AssignmentName like "%Client Updates%")
Eswar Koneti | Configmgr blog:
www.eskonr.com | Linkedin: Eswar Koneti
| Twitter: Eskonr -
SCCM 2012 R2 changing date and time for patching software update groups
I recieve this error when changing date and time for software update group. worked fine yesterday before patches to the server were applied last night. we removed patches but still get error below. Any help would be great.
ConfigMgr Error Object:
instance of SMS_ExtendedStatus
Description = "Property array AssignedCIs exceeded the max allowed";
ErrorCode = 1078462259;
File = "e:\\nts_sccm_release\\sms\\siteserver\\sdk_provider\\smsprov\\sspupdatesassignment.cpp";
Line = 94;
Operation = "PutInstance";
ParameterInfo = "";
ProviderName = "ExtnProv";
StatusCode = 2147749889;
Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryException
The SMS Provider reported an error.
Stack Trace:
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put(ReportProgress progressReport)
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put()
at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(IResultObject resultObject, List`1 resultObjectsPut, Boolean retainLock)
at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(Boolean retainLock)
at Microsoft.ConfigurationManagement.AdminConsole.DialogFramework.Forms.SmsPropertySheet.Put(ActionTrigger trigger)
System.Management.ManagementException
Generic failure
Stack Trace:
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put(ReportProgress progressReport)
at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlResultObject.Put()
at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(IResultObject resultObject, List`1 resultObjectsPut, Boolean retainLock)
at Microsoft.ConfigurationManagement.AdminConsole.SmsDialogData.Put(Boolean retainLock)
at Microsoft.ConfigurationManagement.AdminConsole.DialogFramework.Forms.SmsPropertySheet.Put(ActionTrigger triggerno it is the final version... is working today after cleaning up database... is working now...thanks
Hello Robert,
would you please give some more informations, as I have the same issue and don't get what you mean bye "cleaning up databases".
Regards ooGDoo
ooGDoo -
I accidentally hit the install software update on my IPad and I am not by my computer and won't be for 2 weeks. Is there any way I can get my IPad off the picture of connecting to ITunes?
No. You must connect your iPad to a computer (it does not have to be yours) in order to restore it to factory settings.
Once you're home, you can restore it from a backup.
Any content that you did not backup has been lost.
~Lyssa -
Query for Software Updates Reports Install Date for only Some of the Installed Updates
We use the following query to retrieve a list of software updates for a specific collection and software update group. There are many cases where the installation status of a software update is 'installed' but there is no corresponding 'install
date'. Can anyone tell me why?
declare @AuthListLocalID as int
declare @CollID as varchar(8)
Select @CollID=CollectionID
from v_Collection
WHERE CollectionID='ZSV0000A'
select @AuthListLocalID=CI_ID from v_AuthListInfo
where CI_UniqueID='ScopeId_EAD5EB80-CC39-4EA2-B08F-A45BB84F1D76/AuthList_4DEAD110-5740-495E-8BD8-467A55C50A0C'
select
rs.Name0 as ServerName,
catinfo.CategoryInstanceName as Vendor,
catinfo2.CategoryInstanceName as UpdateClassification,
ui.BulletinID as BulletinID,
ui.ArticleID as ArticleID,
Case ui.Severity WHEN 10 THEN 'Critical' WHEN 8 THEN 'Important' ELSE LTRIM(ui.Severity) END as Rating,
ui.Title as Title,
Targeted=(case when ctm.ResourceID is not null then '*' else '' end),
Installed=(case when css.Status=3 then '*' else '' end),
IsRequired=(case when css.Status=2 then '*' else '' end),
Deadline=cdl.Deadline,
CAST(CASE IsNull(AddRem.InstallDate0,CAST('1/1/1900' as smalldatetime)) WHEN CAST('1/1/1900' as smalldatetime) THEN AddRem64.InstallDate0 ELSE AddRem.InstallDate0 END as Date) as 'Install Date',
ui.InfoURL as InformationURL
from v_UpdateComplianceStatus css
inner join v_UpdateInfo ui on ui.CI_ID=css.CI_ID
inner join v_CIRelation cir
on ui.CI_ID=css.CI_ID and cir.ToCIID = ui.CI_ID -- add this
inner join v_CICategories_All catall on catall.CI_ID=ui.CI_ID
inner join v_CategoryInfo catinfo on catall.CategoryInstance_UniqueID = catinfo.CategoryInstance_UniqueID and catinfo.CategoryTypeName='Company'
inner join v_CICategories_All catall2 on catall2.CI_ID=ui.CI_ID
inner join v_CategoryInfo catinfo2 on catall2.CategoryInstance_UniqueID = catinfo2.CategoryInstance_UniqueID
and catinfo2.CategoryTypeName='UpdateClassification'
left outer join v_CITargetedMachines ctm on ctm.CI_ID=css.CI_ID
and ctm.ResourceID = css.ResourceID
left outer join v_GS_ADD_REMOVE_PROGRAMS AddRem on css.ResourceID = AddRem.ResourceID and ui.Title = AddRem.DisplayName0
left outer join v_GS_ADD_REMOVE_PROGRAMS_64 AddRem64 on css.ResourceID = AddRem64.ResourceID and ui.Title = AddRem64.DisplayName0
left outer join (select atc.CI_ID
,CreationTime=min(a.CreationTime)
,ExpirationTime=min(a.ExpirationTime)
,StartTime=min(a.StartTime)
,EnforcementDeadLine=min(a.EnforcementDeadLine)
,LastModificationTime=min(a.LastModificationTime)
,Deadline=min(a.EnforcementDeadline)
from v_CIAssignment a
inner join v_CIAssignmentToCI atc on atc.AssignmentID=a.AssignmentID
group by atc.CI_ID) cdl
on cdl.CI_ID=css.CI_ID
left outer join v_R_System rs ON css.ResourceID=rs.ResourceID
where css.ResourceID in (
Select vc.ResourceID
FROM v_FullCollectionMembership vc
WHERE vc.CollectionID=@CollID)
and cir.FromCIID=@AuthListLocalID
and cir.RelationType=1
order by
catinfo.CategoryInstanceName
, catinfo2.CategoryInstanceName
, ui.ArticleIDHi Mate,
Its really difficult to do get the installed date of the patches as there is no table available in SCCM DB to pull this info i had a requirement in the past but i was unable to do had done it via work around.
This can be done after editing of sms_def.mof file or else using the power-shell script in windows server 2008 where the powershell is a feature by default.
H/W inventory:
For the 2000 servers this has to be installed but if we enable this its mentioned it may utilize upto 100 % of the Memory during the h/w inventory you can check that in your SMS_DEF.MOF -
QuickFixEngineering you can see the warning.uickFixEngineering
http://support.microsoft.com/kb/279225/en-us
Powershell script:
http://msmvps.com/blogs/richardsiddaway/archive/2011/10/23/1760058.aspx
the warning for the quick fix engineering is not there on 2012 but there on 2007 hope the info help you to achieve your output.
Kamala kannan.c| Please remember to click “Mark as Answer” or Vote as Helpful if its helpful for you. |Disclaimer: This posting is provided with no warranties and confers no rights -
Automatic create Software Update Group and assign patches
Does someone has a e.g. powershell/vbs script which does the following:
- step 1: verify which patches are added to Windows 7 image using SCCM 2012 Offline Servicing
- step 2: verify all downloaded and deployed patches in the SCCM 2012 environment
- step 3: get the multi-reboot patches
Then creates a Software Update Group and add all patches obtained in step 2 and exclude all patches obtained in step 1 and step 3..
Then I can assign that software update group to my Reference Image task sequence and I will not ran in the currently available problems where lists are to big and software updates during the task sequence are failing :-)
Does some likes this and want to help me with it ?
I think it is a nice solution for the patch deployment problem during the reference image task sequence phase.1. I've not written a script for that but to be plain: why? There's no reason you shouldnt have those patches downloaded and deployed anyway in case someone makes a computer "the old fashioned way" then joins it to the domain.
2. This is what ADR is for. I've got a few runbooks to help with things like cleaning up expired patches, but you shouldn't need any script for this step specifically.
3. Getting multi-reboot patches someone already did for you :) http://blogs.technet.com/b/deploymentguys/archive/2015/03/11/excluding-known-multi-reboot-updates-during-a-zti-deployment.aspx
Basically for #3, you just replace the update task with the MDT version and put this script right in front. Bam, done :) As for the extra scripting to exclude downloading patches you injected with DISM (#1)... I honestly don't see a point ...
but I could probably write something if you wanted. -
I got a software update message this morning and clicked install and restart. Now my e-mail icon has disappeared from the dashboard. How do I get it back?
Don't recall the exact wording. But it is the same in appearance as others. Anyway, problem solved using RogerWilmut1 reply to someone else. I opened Applications and got the icon back. Thanks for responding.
-
Export and Import members of a Software Update Group
Greetings,
I am looking for a method I can use to Export a Software Update Group (or just it's members) to a file that I can then use to Import into another 2012 hierarchy. I can't use the built-in Migration process as it is already connected to a different Hierarchy.
I have scripts that will pull Approvals from WSUS and then import into Update groups, but I also need something that I can use to copy update groups from "DEV" to "PROD" and back again.
Any thought or suggestions most welcome.
Scott.Hi
You cannot export Software Update Groups in ConfigMgr 2012.
One way of doing what you what is to use Powershell to "dump" all the settings of your Software Update Groups and then use that file as a basis for creating the Software Update Group in production. Or you could just create all Software Update Groups using
a Powerscript which runs in dev and production.
To get you started, you could look at the snippet of code below, which I use for creating Software Update Group automatically.
import-module ($Env:SMS_ADMIN_UI_PATH.Substring(0,$Env:SMS_ADMIN_UI_PATH.Length-5) + '\ConfigurationManager.psd1')
$PSD = Get-PSDrive -PSProvider CMSite
CD "$($PSD):"
$DPDate = get-date "22-02-2011 19:00:00"
$SUGName = "Workstaitions 2011 02 February"
$SUGMembers = Get-CMSoftwareUpdate | Where-Object {$_.DatePosted -eq $DPDate -and $_.NumMissing -ge 1} | select CI_ID
New-CMSoftwareUpdateGroup -Name $SUGName -UpdateId $SUGMembers.CI_ID -
Downloaded additional language for software update group question
Hi,
We have some clients where the updates are stuck at downloading at 66% and I think it may be due to missing a language. So I went into the software update group and redownloaded it again with the additional language selected. Do I now need to do anything
else? Do I need to re-deploy it to the collection again? Just not sure if more is required after downloading the additional language? TIACorrect. You can log in to any endpoint in that state and run machine policy evaluation cycle or use right click tools to do so and you should see that client download missing update.
Additionally, you can check logs for more details on what is really going on:
UpdatesDeployment.log UpdatesHandler.log - both in C:\Windows\CCM\Logs folder and C:\Windows\WindowsUpdate.log -
Creating software update group for required updates ?
Hello,
I've been trying to find an easy way to create a software update group that contains required security updates for a specific device collection but no solution yet. It is easy to get which security updates are required for that collection via SQL query or
by using built-in report in sccm2012. The problem is, there is no way to easily create a update group to deploy from those lists. You have to add them one by one and that takes so much time. So i would be glad if someone have an answer for me?
Best Regards,Thanks for your quick response. I have hundreds of required updates in the software update section. So you say deploy all of them to that collection even most of are not required for those devices. At this point it seems unreasonable to deploy so much
unnecessary file which will increase the burden on network and devices while it also increases the risk of failures. On the other hand it is also very time consuming to add approx. 50 update one by one to update group. -
I'm trying to download some purchased TV shows to my iPad Air. I keep getting the dreaded Download Error Tap to Retry Message. I've signed out of iTunes and back in. I've updated my software. I have plenty of room for them on the Air. We are taking a long flight this week, and I wanted to have something new to watch. I've read through lots of threads on this but I can't seem to find a good solution that I haven't tried.
If I can get them to download them on my iMac computer, can I then transfer them to my iPad? How is this done? (Please pardon an older lady's ignorance, and thank you for any assistance!)
JodyHello jody5758
Continue your troubleshooting with the article below. IT will walk you through checking the Date & Time as well as checking the settings of your router to ensure a proper connection.
Can't connect to the iTunes Store
http://support.apple.com/kb/ts1368
Regards,
-Norm G. -
Hi, I'm trying to load Facetime on my MacBook and it says "You are missing a critical security patch. Please use Software Update to install Security Update 2010-005". I've checked and all my software is updated. What do I do?
First off, iOS 5 will not run on Macs. You need to give us your Mac OS X on your Mac to determine which security update you need. Go to Apple menu -> About This Mac. And then read the link here:
http://support.apple.com/kb/HT1222 -
My macbook air says I have a software update to install and In order to do that I have to restart it first. After I restart it, it doesn't do anything and I do it over and over and it still doesn't update. Please Help
The order is generally as follows:
Download the update
Allow the update to install
The update will force a restart of your computer
So I suspect you are simply misreading the directions regarding the timing of the restart.
Maybe you are looking for
-
How to change the font of the text in Control Editor??
How to change the font of the text in Control Editor??
-
I am facing following issue in cloud database Issue: Altering any stored procedure in cloud database, Application throwing time out issue. If same stored procedure running in backend(SQL),it's executing without delay i.e. executing in 3 sec, not sur
-
2 separate itunes accounts for 1 ipod touch
This is probably not complicated but here is my situation.... My daughter has an ipod touch and always asks me to add movies, games, etc. My ex wife decided that she wanted the itunes account shared with her account and since she won't give me the pa
-
Adding metadata to mp4 files to show as "TV Show"
I am looking for some help in adding metadata to mp4/m4v files so that they autoload as "TV SHOWS" when imported into iTunes. I have several files so it would be helpful if anyone knows of a way to do batches of files. Thanks to the Mac world out the
-
plz tell me the meaning and necesity of processcodes(we41 and we42) in idocs.