Software Update Packages and binary differential replication

Do Software Update packages have any differential replication built in, or do the update packages just re-deploy the full package when updates are added or removed from it?

All ConfigMgr content replication always uses file differential replication so no to your question, only the changed files are sent. BDR wouldn't help unless and actual file is changed at the binary level which, to my knowledge, never happens with software
update files, and typically only happens (and is of value) with large files like OS images (aka WIMs).
Jason | http://blog.configmgrftw.com

Similar Messages

Creating Software Update Packages - Best Practice?

I am setting up our SCCM 2012 R2 environment to begin using it for Windows Updates, however I'm not sure 100% the best method of setting it up.
Currently my plan is to break out the deployment packages by OS, but I read\told that I should avoid creating to many dynamic deployment packages, as every time it changes all the computers will re-scan that package. So What I want to do is create
various packages for OS and years, so I would have a package that contains all updates for Windows 7, older then January 31, 2013 (assuming the package doesn't have 1000+ updates), and are not superseded\Expired. Then I would create Packages for the 2014
monthly updates each month, then at the end 2014, combine them all in 1 package, and restart the process for 2015. Is this a sound plan or is there a better course of action?
If this the best practice method, is there any way to automatically create these packages? I tried the Automatic Deployment Rules, but I can not set a Year of release, only the a time frame of the release,(older then 9 Months), unless I am missing
something. The only way I can see doing this is going into All Software Updates, and filtering on my requirements, and then manually creating the package, but this would less desirable, as after each year I would like to remove the superseded and expired
without having to recreate the package.
Mark.

First, please learn what the different objects are -- not trying to be rude, just stating that if you don't do this, you will have fundamental issues. Packages are effectively meaningless when it comes to deploying updates. Packages are simply a way of grouping
the binary files so they can be distributed to DPs and in-turn made available to clients. The package an update is in is irrelevant. Also, you do not "deploy" update packages and packages are not scanned by clients. The terminology is very important because
there are implications that go along with it).
What you are actually talking about above are software update groups. These are separate and distinct objects from update packages. Software Update groups group updates (not the update binaries) into logical groups that can be in-turn deployed or used for
compliance reporting.
Thus, you have two different containers that you need to be concerned about, update packages and update groups. As mentioned, the update package an update is in is pretty meaningless as long as the update is in a package that is also available to the clients
that need it. Thus, the best way (IMO) to organize packages is by calendar period. Yearly or semi-annually usually works well. This is done more less to avoid putting all the updates into a single package that could get corrupted or will be difficult to deploy
to new DPs.
As for update groups, IMO, the best way is to create a new group every month for each class of products. This typically equates to one for servers, one for workstations, and one for Office every month. Then at the end of every year (or some other timeframe),
rolling these monthly updates into a larger update group. Keep in mind that a single update group can have no more than 1,000 updates in it though. (There is no explicit limit on packages at all except see my comments above about not wanting one huge package
for all updates.)
Initially populating packages (like 2009, 2010, 2011, etc) is a manual process as is populating the update groups. From then on, you can use an ADR (or really three: one for workstations, one for servers, and one for Office) that runs every month, scans
for updates released in the past month, and creates a new update group.
Depending upon your update process, you may have to go back and add additional deployments to each update group also, but that won't take too long. Also, always QC your update groups created by an ADR. You don't want IE11 slipping through if it will break
your main LOB application.
Jason | http://blog.configmgrftw.com

Why distribute Software Update Packages to DP's?

I recently integrated WSUS with SCCM 2012 and deployed my first update package, I distributed it to our DP's at each of our facilities and then deployed the package. I am seeing results but it looks like all my clients are going directly to the Active
SUP for the updates instead of grabbing them from their DP's (which is causing my admins to flip over bandwidth usage). If the clients can only grab the updates from the SUP itself what is the point of distributing the software update package to them?
Is this things running as intended or should they be looking to their DP's for this? I have already investigated the option of setting up secondary sites and creating downstream SUP's but I am seeing conflicting forum posts mentioning that the DP's should
handle to update downloads so I don't want to commit to reorganizing our SCCM infrastructure when there is a simpler solution to this.

Yes the SUP was previously the Upstream server for our stand alone WSUS environment, when we integrated WSUS with SCCM we cleared the GPO directing PC's where to get updates from so that it would not interfere with the default client policies I have set.
Interesting point about the DP on the SUP, it does have a DP role assigned as it was the DP for our corporate office. I know the boundaries are configured correctly because my software packages are downloaded by the clients from their local DP's, I even double
checked this to make sure they were not assigned to this DP for some reason. We have the CAS set as the fallback point as well so I don't think that is why either. Our CAS has a DP role and could serve as this for our corporate office, would it be worth a
shot to clear the DP role from the SUP server and see if this reassigns the WUA managed server for the clients?
<![LOG[Enabling WUA Managed server policy to use server: http://NAME OF SUP.DOMAIN.LOCAL:8530]LOG]!><time="08:36:20.522+360" date="02-26-2014" component="WUAHandler" context="" type="1" thread="3924" file="sourcemanager.cpp:938">
That is an excerpt from the WUAHandler.log on one of the clients at a one of our facilities, would this be the correct place to see where it is downloading the update from? My network admin originally tipped me off to this when he was noticing high bandwidth
utilization from our facilities and traced the packets out to our SUP. I edited out the name of the SUP but I know this is the assigned SUP for my Primary site.

Large Software Update Package size.

Not sure if this is normal or not, but I noticed that our Software Update Packages are HUGE. I've noticed a few things.
Office 2010 Updates are being downloaded for ALL Languages - even though I've only selected English.
I see multiple updates being duplicated. For example:
ie11-windows6.1-kb3021952-x64 - I have two of these files, that are same exact size
(50mb) but they are in two different folders.
One is in D:\Source - Updates\February Updates 2015\c2b0814b-b278-4826-b44d-5054771f93d8 the other is in
D:\Source - Updates\February Updates 2015\4178f1cf-204e-4969-aba8-79a537c9ba45
Is this normal? I typically have one SUG/deployment pkg for each month for both Server/Workstation and office packages, and this month my package is about 3.5 gigs..
Is this normal?? Thanks to anyone that can set me straight!

Hi,
In System Center 2012 Configuration Manager, we’ve added the capability to automatically remove software update content from distribution points when that content is related to expired updates. This process helps manage drive space on your distribution points
by removing any content you no longer need.
Also, please refer to the thread below:
https://social.technet.microsoft.com/Forums/en-US/1cdca30e-8b71-41ab-b2f5-7414623da922/ms-office-2013-sp1?forum=configmanagersecurity
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Recreate Software update packages

Hi,
I am working on a new environment where I would like to reorganize the software update packages. Currently, they are organized in 3 types:
- Workstation update packages (W7,8,8.1)
- Server update packages (2003,2008...)
- Application updates (Office...)
For each type there is one package per year (ex: Workstation update packages - 2014...)
Since (per year) I have one package for servers and another one for computers, I end up having the same update twice in 2 different packages (IE update in that case).
I don't think it's a big deal but I would like to "clean" it and regroup it under only one package per year ideally that would contain computer, server and office packages.
Is it possible to reorganize the packages or should I re-download all the updates ?
Also, since I have 3 ADR (Server, computer, Office), I was wondering if it could cause an issue if the three of them point to the same package and are launched around the same time after Patch Tuesday.
Thanks.

Hi,
>>Is it possible to reorganize the packages or should I re-download all the updates ?
If the updates need to be downloaded do not exist in the package, they will be redownloaded.
>>Also, since I have 3 ADR (Server, computer, Office), I was wondering if it could cause an issue if the three of them point to the same package and are launched around the same time after Patch Tuesday.
I think this is OK.
Best Regards,
Joyce
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Software updates package at install pending for a secondary site

Hello all,
For the last 2 weeks I have been fighting ore secondary server that will not download a software updates package. It continues to say "install pending" I keep seeing the same message in the Distmgr.log on the secondary server. I
have checked the despoil.log, sender.log and replmgr.log and do not see anything that sticks out as being a error. I have other packages that can be sent to this distribution point without any problems so I know the permissions are ok.
I have removed the packaged and added it back a few times and waiting day between removing it and adding it back.
This all started when the drive ran low on space and this was the package that ran the drive out of space. My best clue is in the distmgr.log file I see it says package JFG0001ED requires a newer version (5) and the current version is 4. The
problem is the distmgr.log file on the primary server is trying to push version 8 and that is the current version going to the other distribution points. It appears that the secondary server is trying to get an different version than the primary
server is serving up.
I have also removed the distribution point role from the secondary server and added it back. I'm pretty sure recreating the package will fix the issue but since it is an update package it is almost 5GB that I would have to resend
to 40 other DPs.
~Processing incoming file C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\distmgr.box\INCOMING\ZMJO6LPC.PKG. $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.556 2014 Central Daylight Time><thread=2204 (0x89C)>
~Adding package JFG001ED to the active package array. $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>
~Package JFG001ED requires a newer version (5) of source files and the new compressed files haven't arrived yet, current version is 4, skip C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\distmgr.box\INCOMING\ZMJO6LPC.PKG $$<SMS_DISTRIBUTION_MANAGER><Fri
May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>
~Removing package JFG001ED from the active package array. $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>

I would remove the package from that distribution point. Once that is done, and it's not waiting for a new version, you can try sending again. Assuming you now have the space for it.

I forgot my password and am trying to reset my ipod,but it won't work. It says that my ipod is in recovery mode and that I must restore it. I click ok, and then restore, and then restore and update. then it says contacting ipod software update server and

I forgot my password and am trying to reset my ipod, but it won't work.It says that my ipod is in recovery mode and that I must restore it. I click ok, and then click on restore and update. Then it says connecting ipod software update server and a screen pops up with ipod software update on the top and iOS 5.1. It lists a bunch of stuff this update contains and on the bottom it says next, which I click and nothing happens, it just goes back to the ipod restore page. Help, what am I doing wrong?

This device is not eligible for the requested build (Also sometimes displayed as an "error 3194")
Update to the latest version of iTunes. Mac OS X 10.5.8 (Leopard) users may need to download iTunes 10.6.3.
Third-party security software or router security settings can also cause this issue. To resolve this, followTroubleshooting security software issues.
Downgrading to a previous version of iOS is not supported. If you have installed software to performunauthorized modifications to your iOS device, that software may have redirected connections to the update server (gs.apple.com) within the Hosts file. Uninstall the unauthorized modification software from the computer.
Edit out the "gs.apple.com" redirect from your hosts file, and then restart the computer for the host file changes to take affect. For steps to edit the Hosts file and allow iTunes to communicate with the update server, see iTunes: Troubleshooting iTunes Store on your computer, iPhone, iPad, or iPod—follow steps under the heading Blocked by configuration (Mac OS X / Windows) > Rebuild network information > The hosts file may also be blocking the iTunes Store. If you do not uninstall the unauthorized modification software prior to editing the hosts file, that software may automatically modify the hosts file again on restart.
Avoid using an older or modified .ipsw file. Try moving the current .ipsw file (see Advanced Steps > Rename, move, or delete the iOS software file (.ipsw) below for file locations), or try restoring in a new user to ensure that iTunes downloads a new .ipsw.

Well I have a new macbook pro and there is a software update available and after i update it, it keeps asking for the same thing to update over and over again! What can be done?

Well I have a new macbook pro and there is a software update available and after i update it, it keeps asking for the same thing to update over and over again! What can be done?

The App Store version sometimes gives problems. As you can't install 10.8.4 from the App Store, download and install the Combo edition > http://support.apple.com/kb/DL1659?viewlocale=en_US&locale=en_US This edition will work and will update OS X to the most recent version, in that case, 10.8.4

When i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well

when i finally connected my mac to work network on windows environment everything related to apple including App store, Safari, software updates, iCloud and iTunes do not work using a proxy server and everything else is working very well including chrome browser…i tried everything but no clue...anybody have solution for this..???

I also forgot to note that this problem also persists with the new iBooks application. I cannot get past the 'Get Started' screen or access the iBooks Store. Again, all top bar menus are unresponsive.
DT

I installed latest software updates today and now iphoto won't work at all - heeelllppp!

Hello
i installed latest software updates today and since then iphoto will not work at all. The window oens but it remains blank, and when I go to force quit it says iphoto not responding, so it's as if it's crashing on startup. I can't access my photo library or put new photos in the library from my camera, in fact I can't do anything at all with it.
I am in Africa a long way from home and tech support, so please can anyone help me?? Im a bit desperate as my whole photo library is inaccessible, and it will be months before I am back in the UK.
I am not hugeley techie so plain English please.
Thanks

Hardware Information:
          MacBook Pro (15-inch Core 2 Duo)
          MacBook Pro - model: MacBookPro2,2
          1 2.16 GHz Intel Core 2 Duo CPU: 2 cores
          3 GB RAM
Video Information:
          ATY,RadeonX1600 - VRAM: 128 MB
Startup Items:
          AdobeVersionCue: Path: /Library/StartupItems/AdobeVersionCue
          ADSLAutoConfig: Path: /Library/StartupItems/ADSLAutoConfig
          HWNetMgr: Path: /Library/StartupItems/HWNetMgr
          HWPortDetect: Path: /Library/StartupItems/HWPortDetect
          StartOuc: Path: /Library/StartupItems/StartOuc
System Software:
          Mac OS X 10.6.8 (10K549) - Uptime: 0 days 0:49:42
Disk Information:
          Hitachi HTS541612J9SA00 disk0 : (111.79 GB)
                    (null) (disk0s1) <not mounted>: 200 MB
                    Macintosh HD (disk0s2) /: 111.47 GB (6.45 GB free)
USB Information:
          JMicron USB to ATA/ATAPI bridge 111.79 GB
                    (null) (disk1s1) <not mounted>: 32 KB
                    Backup (disk1s3) <not mounted>: 111.67 GB
          Vodafone (Huawei) Vodafone Mobile Broadband (Huawei)
          Micron Built-in iSight
          Apple Computer Apple Internal Keyboard / Trackpad
          Apple Inc. Bluetooth USB Host Controller
          Apple Computer, Inc. IR Receiver
FireWire Information:
Thunderbolt Information:
Kernel Extensions:
          com.rim.driver.BlackBerryUSBDriverInt          (0.0.67)
          com.huawei.driver.cdc_usb_bus          (1.0.2)
          com.huawei.driver.cdc_acm          (2.6.2f17)
          com.huawei.driver.dc_net          (1.0.2)
          com.huawei.driver.cdc_ncm          (2.6.2f16)
          de.novamedia.driver.NMSmartplugSCSIDevice          (1.0.1)
Problem System Launch Daemons:
          [loaded] de.novamedia.nmnetmgrd.plist
          [not loaded] org.samba.winbindd.plist
Problem System Launch Agents:
          [failed] com.apple.Kerberos.renew.plist
Launch Daemons:
          [loaded] com.adobe.fpsaud.plist
          [loaded] com.adobe.versioncueCS3.plist
          [loaded] com.microsoft.office.licensing.helper.plist
          [loaded] com.trusteer.rooks.rooksd.plist
          [failed] xxx.qnation.PeerGuardian.kextload.plist
Launch Agents:
          [loaded] com.adobe.CS4ServiceManager.plist
          [loaded] com.trusteer.rapport.rapportd.plist
          [loaded] de.novamedia.VodafoneDeviceObserver.plist
User Launch Agents:
          [loaded] com.adobe.ARM.[...].plist
          [failed] com.facebook.videochat.[redacted].plist
          [loaded] com.google.keystone.agent.plist
          [loaded] com.zeobit.MacKeeper.Helper.plist
User Login Items:
          iTunesHelper
          MTN Pocket Internet
          Microsoft AU Daemon
          Vodafone Mobile Broadband
          Vodafone Mobile Broadband
3rd Party Preference Panes:
          Adobe Version Cue CS3
          BDSPrefPane
          Déjà Vu
          Flash Player
          Flip4Mac WMV
          Trusteer Endpoint Protection
Internet Plug-ins::
          Flip4Mac WMV Plugin: Version: 2.3.2.6
          FlashPlayer-10.6: Version: 11.9.900.152 - SDK 10.6
          JavaAppletPlugin: Version: 13.9.8 - SDK 10.6 Outdated! Update
          Flash Player: Version: 11.9.900.152 - SDK 10.6 Outdated! Update
          AdobePDFViewer: Version: 9.5.5
          QuickTime Plugin: Version: 7.6.6
          SharePointBrowserPlugin: Version: 14.3.9 - SDK 10.6
          Google Earth Web Plug-in: Version: 7.1
          RealPlayer Plugin: Version: (null)
          Silverlight: Version: 4.0.50524.0
          iPhotoPhotocast: Version: 7.0
Bad Fonts:
          None
Old applications:
          None
Time Machine:
          Information not available
Top Processes by CPU:
              32%          firefox
              25%          Vodafone Mobile Broadband
               3%          EtreCheck
               2%          WindowServer
               1%          ps
Top Processes by Memory:
          289 MB          firefox
          86 MB          mds
          55 MB          Mail
          52 MB          WindowServer
          52 MB          Finder
Virtual Memory Statistics:
          1.44 GB          Free RAM
          846 MB          Active RAM
          427 MB          Inactive RAM
          324 MB          Wired RAM
          383 MB          Page-ins
          0 B          Page-outs

HT201263 i forget my passcode.now when i put my phone into recovery mode it connects to i phone software update server and sftware starts download but after much time of download error=-39 occurs

now when i put my phone into recovery mode it connects to i phone software update server and sftware starts download but after much time of download error=-39 occurs

my itune keep showing message that i tune is downloading software for my phone. but downloading for several minutes it displays message that i tune cannot connect to my phone because it is locked with a passcode. first entre the pass code.
on the other hand phone is started with a message on screen phone is disabled.

HT1222 i completed a software update yesterday and whenever I try and launch iTunes now it crashes almost immediately. I have tried downloading an installing the latest version but to no avail - any ideas?

i completed a software update yesterday and whenever I try and launch iTunes now it crashes almost immediately. I have tried downloading an installing the latest version but to no avail - any ideas?

Have you tried temporarily turning off your firewall and antivirus software until the download has completed ?

My HTC One received a software update yesterday, and it wiped out most of the theme and live wallpaper options. How do I get the previous options back?

My HTC One received a software update yesterday, and it wiped out most of the theme and live wallpaper options. How do I get the previous options back?

This was NOT an update, rather a downgrade... the font size in text messages is now smaller and difficult to read. I have tried changing font size in settings and it does not apply to text messages. The lock/unlock screen pattern now reminds me of drawing a stick figure. My vehicle is now having problems with Bluetooth importation of my phone book--I keep receiving an on screen error message as it tries to continuously reattempt to import... And yes, the live weather wallpaper i favored is no longer an option... Why?

Automatic create Software Update Group and assign patches

Does someone has a e.g. powershell/vbs script which does the following:
- step 1: verify which patches are added to Windows 7 image using SCCM 2012 Offline Servicing
- step 2: verify all downloaded and deployed patches in the SCCM 2012 environment
- step 3: get the multi-reboot patches
Then creates a Software Update Group and add all patches obtained in step 2 and exclude all patches obtained in step 1 and step 3..
Then I can assign that software update group to my Reference Image task sequence and I will not ran in the currently available problems where lists are to big and software updates during the task sequence are failing :-)
Does some likes this and want to help me with it ?
I think it is a nice solution for the patch deployment problem during the reference image task sequence phase.

1. I've not written a script for that but to be plain: why? There's no reason you shouldnt have those patches downloaded and deployed anyway in case someone makes a computer "the old fashioned way" then joins it to the domain.
2. This is what ADR is for. I've got a few runbooks to help with things like cleaning up expired patches, but you shouldn't need any script for this step specifically.
3. Getting multi-reboot patches someone already did for you :) http://blogs.technet.com/b/deploymentguys/archive/2015/03/11/excluding-known-multi-reboot-updates-during-a-zti-deployment.aspx
Basically for #3, you just replace the update task with the MDT version and put this script right in front. Bam, done :) As for the extra scripting to exclude downloading patches you injected with DISM (#1)... I honestly don't see a point ...
but I could probably write something if you wanted.

Automatic software update stuck and going nowhere

Had 10.5 on a PPC Macmini, running smoothly, no problems. Ran Software update today and it's stuck on a progress bar now for over an hour installing 10.5. The progress seems stuck 'installing one item' at app 10%. I am tempted to shut down but thought I might get a quick answer here first.
Peter

peter stephen wrote:
Had 10.5 on a PPC Macmini, running smoothly, no problems. Ran Software update today and it's stuck on a progress bar now for over an hour installing 10.5. The progress seems stuck 'installing one item' at app 10%. I am tempted to shut down but thought I might get a quick answer here first.
Peter
Was it just one update, or many? Which one is it stuck at?
Since you are running 10.5.0 there are many updates available, and installing them all at once might be problematical. Nothing should take an hour to install, but if you are installing a dozen or so updates, it's possible to take a long time.
You might run your activity monitor and see if anything is really happening.

Software Update Packages and binary differential replication

Similar Messages

Maybe you are looking for