What Software Update package should I make?

Is there one Software Update search/criteria I can make that
will ensure computers that maybe haven't had updates in over a year are updated?  
Updates would be for Windows 7 64 bit and Office 2010 32 bit 
Just curious what others are using or what I should try in my case..?
Which search/criteria/filter should I create in SCCM to deploy to the Windows 7 computers? 
And how could I also integrate that into an OSD Task Sequence if possible? 

It also depends on the Update Classification. In most cases I use at least the following criteria:
Expired, Superseded, Product and
Update Classification. Do keep in mind that it won't filter the x64 or the x86 updates, you either have to do that manually or just leave them in (they won't get installed when they're not applicable).
You can integrate them in your OS deployment by deploying the updates to a collection that includes the machines during the deployment and by including the
Install Software Updates step.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude
Should I add "Bulletin ID" and criteria is Starts with "MS"? 
Or will that leave out other updates that would keep it out of compliance? 

Similar Messages

  • Why distribute Software Update Packages to DP's?

    I recently integrated WSUS with SCCM 2012 and deployed my first update package, I distributed it to our DP's at each of our facilities and then deployed the package. I am seeing results but it looks like all my clients are going directly to the Active
    SUP for the updates instead of grabbing them from their DP's (which is causing my admins to flip over bandwidth usage). If the clients can only grab the updates from the SUP itself what is the point of distributing the software update package to them?
    Is this things running as intended or should they be looking to their DP's for this? I have already investigated the option of setting up secondary sites and creating downstream SUP's but I am seeing conflicting forum posts mentioning that the DP's should
    handle to update downloads so I don't want to commit to reorganizing our SCCM infrastructure when there is a simpler solution to this.

    Yes the SUP was previously the Upstream server for our stand alone WSUS environment, when we integrated WSUS with SCCM we cleared the GPO directing PC's where to get updates from so that it would not interfere with the default client policies I have set.
    Interesting point about the DP on the SUP, it does have a DP role assigned as it was the DP for our corporate office. I know the boundaries are configured correctly because my software packages are downloaded by the clients from their local DP's, I even double
    checked this to make sure they were not assigned to this DP for some reason. We have the CAS set as the fallback point as well so I don't think that is why either. Our CAS has a DP role and could serve as this for our corporate office, would it be worth a
    shot to clear the DP role from the SUP server and see if this reassigns the WUA managed server for the clients?  
    <![LOG[Enabling WUA Managed server policy to use server: http://NAME OF SUP.DOMAIN.LOCAL:8530]LOG]!><time="08:36:20.522+360" date="02-26-2014" component="WUAHandler" context="" type="1" thread="3924" file="sourcemanager.cpp:938">
    That is an excerpt from the WUAHandler.log on one of the clients at a one of our facilities, would this be the correct place to see where it is downloading the update from? My network admin originally tipped me off to this when he was noticing high bandwidth
    utilization from our facilities and traced the packets out to our SUP. I edited out the name of the SUP but I know this is the assigned SUP for my Primary site.

  • Source version of software update package is getting modified

    Hi
    In what condition does the source version of package get updated.
    I have a software update package created, suddenly saw its source version got updated.
    Regards Sushain KApoor

    There are only two ways the version (of a software update package) is incremented: you manually trigger a package update or you add updates to the package (which in turn triggers a package update).
    Jason | http://blog.configmgrftw.com

  • Recreate Software update packages

    Hi,
    I am working on a new environment where I would like to reorganize the software update packages. Currently, they are organized in 3 types:
    - Workstation update packages (W7,8,8.1) 
    - Server update packages (2003,2008...)
    - Application updates (Office...)
    For each type there is one package per year (ex: Workstation update packages - 2014...)
    Since (per year) I have one package for servers and another one for computers, I end up having the same update twice in 2 different packages (IE update in that case).
    I don't think it's a big deal but I would like to "clean" it and regroup it under only one package per year ideally that would contain computer, server and office packages.
    Is it possible to reorganize the packages or should I re-download all the updates ?
    Also, since I have 3 ADR (Server, computer, Office), I was wondering if it could cause an issue if the three of them point to the same package and are launched around the same time after Patch Tuesday.
    Thanks.

    Hi,
    >>Is it possible to reorganize the packages or should I re-download all the updates ?
    If the updates need to be downloaded do not exist in the package, they will be redownloaded.
    >>Also, since I have 3 ADR (Server, computer, Office), I was wondering if it could cause an issue if the three of them point to the same package and are launched around the same time after Patch Tuesday.
    I think this is OK.
    Best Regards,
    Joyce
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • What software would I use to make an ios app?

    What software could I use to make an IOS app?

    Apple's IDE, Xcode.
    See Xcode Versions ~ iOS - As of 9.19.12

  • I s Final Cut X compatable with Sony HXR MC50E?  What software would I need to make this camera compatable with FC7?

    Is FCP X compatable with Sony HXR MC50E?  What software would I need to make thia camera compatable with FCP 7

    I import media from anothe SONY HXR series camera all the time...

  • Large Software Update Package size.

    Not sure if this is normal or not, but I noticed that our Software Update Packages are HUGE.  I've noticed a few things.
    Office 2010 Updates are being downloaded for ALL Languages - even though I've only selected English.
    I see multiple updates being duplicated.  For example:
      ie11-windows6.1-kb3021952-x64     - I have two of these files, that are same exact size 
    (50mb) but they are in two different folders.   
      One is in D:\Source - Updates\February Updates 2015\c2b0814b-b278-4826-b44d-5054771f93d8  the other is in
    D:\Source - Updates\February Updates 2015\4178f1cf-204e-4969-aba8-79a537c9ba45
    Is this normal?  I typically have one SUG/deployment pkg for each month for both Server/Workstation and office packages, and this month my package is about 3.5 gigs..
    Is this normal??  Thanks to anyone that can set me straight!

    Hi,
    In System Center 2012 Configuration Manager, we’ve added the capability to automatically remove software update content from distribution points when that content is related to expired updates. This process helps manage drive space on your distribution points
    by removing any content you no longer need.
    Also, please refer to the thread below:
    https://social.technet.microsoft.com/Forums/en-US/1cdca30e-8b71-41ab-b2f5-7414623da922/ms-office-2013-sp1?forum=configmanagersecurity
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • What software do I use to make a power point presentation on my IPAD?*

    What software do I use to make a power point presentation on my IPAD?*

    The application you want to purchase from the App Store is called KEYNOTE
    http://www.apple.com/apps/keynote/

  • Software Update Packages and binary differential replication

    Do Software Update packages have any differential replication built in, or do the update packages just re-deploy the full package when updates are added or removed from it?

    All ConfigMgr content replication always uses file differential replication so no to your question, only the changed files are sent. BDR wouldn't help unless and actual file is changed at the binary level which, to my knowledge, never happens with software
    update files, and typically only happens (and is of value) with large files like OS images (aka WIMs).
    Jason | http://blog.configmgrftw.com

  • Software updates package at install pending for a secondary site

    Hello all,
    For the last 2 weeks I have been fighting ore secondary server that will not download a software updates package. It continues to say "install pending"  I keep seeing the same message in the Distmgr.log on the secondary server. I
    have checked  the despoil.log, sender.log and replmgr.log and do not see anything that sticks out as being a error. I have other packages that can be sent to this distribution point without any problems so I know the permissions are ok.
    I have removed the packaged and added it back a few times and waiting day between removing it and adding it back.
    This all started when the drive ran low on space and this was the package that ran the drive out of space. My best clue is in the distmgr.log file I see it says package JFG0001ED requires a newer version (5) and the current version is 4. The
    problem is the distmgr.log file on the primary server is trying to push version 8 and that is the current version going to the other distribution points. It appears that the secondary server is trying to get an different version than the primary
    server is serving up.
    I have also removed the distribution point role from the secondary server and added it back. I'm pretty sure recreating the package will fix the issue but since it is an update package it is almost 5GB that I would have to resend
    to 40 other DPs.   
    ~Processing incoming file C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\distmgr.box\INCOMING\ZMJO6LPC.PKG.  $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.556 2014 Central Daylight Time><thread=2204 (0x89C)>
    ~Adding package JFG001ED to the active package array.  $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>
    ~Package JFG001ED requires a newer version (5) of source files and the new compressed files haven't arrived yet, current version is 4, skip C:\Program Files (x86)\Microsoft Configuration Manager\inboxes\distmgr.box\INCOMING\ZMJO6LPC.PKG  $$<SMS_DISTRIBUTION_MANAGER><Fri
    May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>
    ~Removing package JFG001ED from the active package array.  $$<SMS_DISTRIBUTION_MANAGER><Fri May 30 08:43:28.587 2014 Central Daylight Time><thread=2204 (0x89C)>

    I would remove the package from that distribution point.  Once that is done, and it's not waiting for a new version, you can try sending again.  Assuming you now have the space for it.

  • How can I tell what Software Update Groups are members of Deployment Packages?

    I have a single SCCM 2012 SP1 CU4 server running on Windows Server 2012.
    I am trying to clean things up a little bit and I am curious:
    How can I tell which Software Update Groups use
    which Deployment Packages?  I don't see it on the Properties of either one.
    Thanks!

    Funny thing is that you can't see from the software update (in the software update group) in which deployment package(s) it exists. Your only options are manually comparing every single update (not really an option), or use PowerShell and do something
    like this:
    http://myitforum.com/myitforumwp/2014/05/12/matching-configmgr-software-updates-to-a-deployment-package-with-powershell/
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Nokia C7 (059D0B0) software update package problem...

    Hi,
    I was helping my aunt to update her C7 (RM-675) model. I tried to help her by installing the PR1.2 update first through SW Update as it showed up there. I managed to download the file with size of almost 7000kb through Wi-Fi on the phone.
    When the phone requested for a restart, the screen went white and a word "Updating" showed up. However, within ten seconds, there's a message showing "Restarting the phone" on the white screen.
    Phone booted into the homescreen and a message popped out saying "Phone not updated. The software package is not compatible with your phone. Please check with your local service provider".  
    That didn't make me give up. I went to try again using USB connection to Nokia OVI Suite. The system checked there's an update of PR1.2 and I chose to update it. At first, the system requested for a phone backup and so I waited for it to finish backing up the phone. Later, I downloaded the PR1.2 software update with the file size of 175mb. When finished downloading, there's an error message showing up "Something went wrong". The system suggested me to restart the Nokia OVI Suite and then after several attempts, I couldn't detect the updates anymore. The result returned with "No updates available".
    I went to try my luck on *#0000# and check for updates. I could detect v22.014 update was available for download with the file size of 25000kb+. Again, I finished downloaded it and phone requested for a restart and it took me to the white screen and the same word "Updating" appeared on the screen again. I thought this time finally I could update to Symbian Anna. Within ten seconds, the phone got rebooted and went to the homescreen again showing up with the same message of  "Phone not updated. The software package is not compatible with your phone. Please check with your local service provider". 
    The phone product code was 059D0B0. She bought this phone in Malaysia from a local dealer.
    I checked the product code variant and this variant is from Spain, I wondered? The latest update for this variant is only 014.002 which I checked on the Nokia official website and still I could detect Symbian Anna update on OTA on the phone. Can the person in charge please check what is wrong with the situation that I'm having? BTW, we're from Malaysia.
    Thank you very much.
    Bernard

    I also had problems with the upgrade to Symbian Anna.
    My carkit didn't work, telephone went off and on frequently, etc.
    Nokia helpcenter told me that my carkit should be upgraded with
    new firmware and that had to try to reinstall Symbian Anna.
    I tried to reinstall Symbian Anna a few times but nothing worked.
    Now I solved the problem!!!!!
    - Make a backup of your files, pics, video's, etc.
    - Put your phone back in the factory settings
    - sofware update via Wifi or LAN
    - Installs Symbian Anna 1/2 en 2/2
    EVERYTHING WORKS FINE NOW!!!!  also my carkit......
    applause for Nokia helpcenter.............NOT!!!!
    It will only take about 10 minutes to configure your telephone
    and maybe some stuff from your backup.
    Tip: put as much as you can on the extra memory card,
    I think most you have it in your phone.

  • Creating Software Update Packages - Best Practice?

    I am setting up our SCCM 2012 R2 environment to begin using it for Windows Updates, however I'm not sure 100% the best method of setting it up.
    Currently my plan is to break out the deployment packages by OS, but I read\told that I should avoid creating to many dynamic deployment packages, as every time it changes all the computers will re-scan that package.  So What I want to do is create
    various packages for OS and years, so I would have a package that contains all updates for Windows 7, older then January 31, 2013 (assuming the package doesn't have 1000+ updates), and are not superseded\Expired. Then I would create Packages for the 2014
    monthly updates each month, then at the end 2014, combine them all in 1 package, and restart the process for 2015.  Is this a sound plan or is there a better course of action?
    If this the best practice method, is there any way to automatically create these packages?  I tried the Automatic Deployment Rules, but I can not set a Year of release, only the a time frame of the release,(older then 9 Months), unless I am missing
    something.  The only way I can see doing this is going into All Software Updates, and filtering on my requirements, and then manually creating the package, but this would less desirable, as after each year I would like to remove the superseded and expired
    without having to recreate the package.
    Mark.

    First, please learn what the different objects are -- not trying to be rude, just stating that if you don't do this, you will have fundamental issues. Packages are effectively meaningless when it comes to deploying updates. Packages are simply a way of grouping
    the binary files so they can be distributed to DPs and in-turn made available to clients. The package an update is in is irrelevant. Also, you do not "deploy" update packages and packages are not scanned by clients. The terminology is very important because
    there are implications that go along with it).
    What you are actually talking about above are software update groups. These are separate and distinct objects from update packages. Software Update groups group updates (not the update binaries) into logical groups that can be in-turn deployed or used for
    compliance reporting.
    Thus, you have two different containers that you need to be concerned about, update packages and update groups. As mentioned, the update package an update is in is pretty meaningless as long as the update is in a package that is also available to the clients
    that need it. Thus, the best way (IMO) to organize packages is by calendar period. Yearly or semi-annually usually works well. This is done more less to avoid putting all the updates into a single package that could get corrupted or will be difficult to deploy
    to new DPs.
    As for update groups, IMO, the best way is to create a new group every month for each class of products. This typically equates to one for servers, one for workstations, and one for Office every month. Then at the end of every year (or some other timeframe),
    rolling these monthly updates into a larger update group. Keep in mind that a single update group can have no more than 1,000 updates in it though. (There is no explicit limit on packages at all except see my comments above about not wanting one huge package
    for all updates.)
    Initially populating packages (like 2009, 2010, 2011, etc) is a manual process as is populating the update groups. From then on, you can use an ADR (or really three: one for workstations, one for servers, and one for Office) that runs every month, scans
    for updates released in the past month, and creates a new update group.
    Depending upon your update process, you may have to go back and add additional deployments to each update group also, but that won't take too long. Also, always QC your update groups created by an ADR. You don't want IE11 slipping through if it will break
    your main LOB application.
    Jason | http://blog.configmgrftw.com

  • Other than main software update, how should I prepare Mac for Lion?

    I'm not at all talented at updating software and operating systems, etc.
    I am aware that i should do the software update from the apple symbol menu on the top left of our screens, but other than that I am unsure about anything else i should do before instaling Lion.
    I've resisted the urge to download it so far, i thought I'd wait to see how it went.
    One way or the other, i am going to get it, if thats where Apple wants to go, then it makes sense to follow them there,while i'm using a mac, but I just want to make sure I'm not one of those that are current;ly being told that they should have checked this or that before installing.
    I don't have any expensive applications to worry about becoming disfunctional, i don't really have that many apps on the iMac at all, but things like flash worry me, I'm terrible at comprehending the file system on any computer, so moving things around and deleting things terrifies me.
    Anyway, I just wondered if someone could give me a small checklist to refer to before I let the Lion out of it's cage.
    Thanks.

    First as mentioned above have a clone backup handy. HDD are cheap these days I personally have a clone copy of my snow leopard system in case I need it.  Use carbon copy cloner or superduper!
    Then make sure you dont need any of the any PowerPC only application. A way to do this is found on this page http://www.cultofmac.com/os-x-lion-kills-rosetta-powerpc-support-heres-what-to-d o-about-it/103458 .
    If you don't need any of these applications then go ahead and delete them.  Lion kills support for these applications so you won't be able to open them.
    A list of compatible liion application is found here http://roaringapps.com/
    then you can go ahead and upgrade or make clean install of lion.  I personally prefer the clean install and is what I did.  I prefer to erase my whole hardd drive and install clean.  Then used migration assistant and my clone backup to import all my settings and applications.  You can also install all applications from scratch if you prefer.
    If you want to make a bootable DVD or USB stick to make a clean install it's easy just contact me if you want the steps. 
    Hope this helped.

  • Software update package for SnowLeopard on April 1st?

    Hi. Am new to this forum. This is my first post.
    I got a message about software updates while connected in an aiport lounge on April 1st. I made the mistake of accepting without checking what was in the package. It turned out to be a rather big package, and though the WiFi connection was fast it took about 10 min to download. When shutting down to restart after download, the blue screen with the little spinning wheel just stayed on for 15-20 minutes - so finally I shut down the computer and restarted.
    The problem is that this update does not display in System Settings where all previously installed updates are listed.
    Any idea what this update was and why it doesn't show?
    Should I roll my system back to before I got this update using Time Machine?
    Thanks in advance for you help!

    Welcome to Apple Discussions.
    It sounds like you shut down too quickly, while it was installing. Fortunately the 10.6.3 update can be rerun and it should pick up where it left off. But under the circumstances I think you'd be better off with The standalone 10.6.3 Combo Update
    Let us know. And yes, it is a large download.
    -mj

Maybe you are looking for

  • I cannot update my app's it says apple id has been disabled.. help

    does any one know why i cannot up date my app's. I have tryed changing my password, keeps sating apple id has being disabled.. help

  • Where did my I-Tunes Header Go?

    I don't know how or when it happened but my I-tunes header line is gone. The play buttons, the search box and ability to drag the I-tunes page around have gone. Any thoughts? Dual 2Ghz G5 PowerMac   Mac OS X (10.4.10)  

  • Problem(16824) in updation of Air application

    hello friends                  i m made an air application for my project.but needs to upgrade it.so i followed the update frame work as guided in this blog                    http://www.adobe.com/devnet/air/flex/quickstart/update_framework.html this

  • HT1349 Ipad calendar

    I have an Ipad2 and and iphone 4s.  I do keep a current calendar on them but I would like to be able to print it out.  I don't have a compatible printer for the Ipad is there a way that I can copy the calendar and send it to my e-mail?

  • How to Have photoshop CS5 shortcuts in one FILE in start menu

    Hello everybody I would like to have in one FOLDER all Photoshop CS5 shortcuts in Start menu, I mean force photoshop setup.exe to do it (not do it manually). I heve been searching for a solution for a long time and never found something usefull. If a