Windows XP extended support patches through SCCM 2012

My question is how do customers that  have signed up for extended support agreement with Microsoft for Windows XP get any NEW Windows XP security updates through SCCM/WSUS?
1. How are these NEW security updates released to the customer?
2. How can they deploy these through SCCM 2007/2012?
3., If updates are released through another mechanism , I presume the customer woyuld need to manually deploy these through SCCM?
Appreciate if anyone has had experience recently around this?

There is another channel that these updates are released that has nothing to do with WSUS to my knowledge. I have no idea exactly how it works or if these updates can be integrated into ConfigMgr. You should talk to your TAM.
Jason | http://blog.configmgrftw.com | @jasonsandys

Similar Messages

  • Same Windows Update installed multiple times through SCCM 2012

    Hello There,
    I am using SCCM 2012 to deploy critical and important updates through Automatic Deployment Rule it works fine but i have noticed recently on the client machines i see the same KB / update is installed multiple times.
    Why would this happen? Please suggest.
    Regards,
    Maqsood
    Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified

    Hi,
    My computer also have duplicated updates installed. I uninstalled one of them that needed a restart. Then uninstall another one after restart, it hadn't asked for restart and the uninstall process was very fast. So I think the update only installed one time,
    the others are duplicated records.
    Best Regards,
    Joyce
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Deploy Windows 8 To Go through SCCM 2012 SP1

    First a little backgroud:
    I have SCCM 2012 SP1 with MDT 2012 Update 1 integrated. I am using an MDT UDI task sequence to deploy windows 8 and it works perfectly. My Windows 8 image is fairly thin (only containing OS updates and C++ runtimes), and I am using the MDT database
    and an MDT task sequence in SCCM 2012  to dynamically set a list of SCCM Applications to install as well as settings based on location. 
    Now I want to get Windows To Go provisioning working in SCCM 2012 SP1. I had a powershell script that preparied the drive and applied a thick image (including office and other apps) to it then updated unattend.xml with a computer name and the domain join
    info.  That worked for me however I'd like to levarage the dynamic task sequence that I described above to build these To Go sticks the same as my other Windows 8 machines without having to keep updating the thick image evertime something changes. 
    There isn't much info out there that Iv'e found on setting up SCCM 2012 SP1 to provision windows to go here are the two that I have found 
    http://ixrv.blogspot.com/2012/10/provisioning-windows-8-to-go-with.html
    http://technet.microsoft.com/en-us/library/jj651035.aspx
    I followed the instructions in the first link and was able to run the Windows to Go Creator program and apply the prestaged wim to the USB stick. I rebooted from the USB stick Windows PE started and started to run my task sequence then it errored out on
    the apply image step. At this point it occured to me that the MDT SCCM task sequence was probably not setup for prestaged media and or Windows To Go. 
    So my question is am I on the right track? Do I just need to examine each step in my task sequence and make sure that it will work properly with my Prestaged/Windows To Go stick? If so has anyone actually gotten this to work that could give me some advice?
    Or is it asking too much to have a dynamic Windows To Go task sequence and I should just be building a thick image and using a second task sequence specifically for Windows to go? 
    are there any other resources for Windows To Go with SCCM that I'm missing? 
    Thanks, 
    Tony

    First of all sorry I missed your last three posts I have to check my email notifications. I'll try to answer all of them even though I think the last part is the only one where you are still stuck. 
    When I created my prestaged media I didn't put anything into it except for the the OS image and my PE image. On the Select Application and Select Package screen in the prestaged media wizard remove any application or packages that are added automatically.
    The task sequence is supposed to be smart enough to know if the version of the package that is on the prestaged media is out of date and go to a DP to get it but that didnt work for me. The only way I was able to get it to work was to remove all the packages
    from the prestaged media even the Customsettings package, the MDT toolkit package, USMT, etc.. 
    http://social.technet.microsoft.com/Forums/en-US/configmgrosd/thread/d729d0ff-829f-4af8-91af-2131b3355fd0/
    This thread which is about prestaged media in SCCM 2007 helped me to understand how prestaged media is supposed to work. Basically what I learned is that once the computer is rebooted from the ToGo stick into PE the task sequence will run the same as any
    other task sequence installing any applications and setting up your ToGo stick just like any other computer that runs the task sequence they dont need to be in your prestaged media for this to happen. 
    You shouldn't need to worry about partitioning WTGCreator.exe will partition the ToGo stick for you I'm just using the standard MDT Integrated partitioning in my task sequence. The one thing that I did was set the Windows To Go Creator package to "run from
    distribution point" which speed things up because then it didnt download the prestaged wim then apply it to the USB drive. 
    Is it booting into PE then rebooting? Did you check the "Allow unattend operating system deployment" check box when you made your prestaged media? If so it wants you to have set the task sequence to run in a task sequence variable SMSTSPreferredAdvertID
    to the task sequence ID you want to run. I'd just remake the media and leave that box unchecked. 
    Good luck and let me know how it works for you. I'll check back sooner this time I promise. 

  • How to manage Work group Computer through SCCM 2012 R2

    Hello..Experts,
    We have to manage the Workgroup Computers both Linux and windows Environment through SCCM 2012 R2.
    what are limitation associated with managing Workgroup computer both with Linux and windows Computers through SCCM.
    Please help us how to achieve this.

    Windows devices that are Workgroup members have the same features for management as domain joined devices except that it is slightly more difficult to get the client installed on these 'unmanaged' devices.
    The Linux computers have only basic support for  Inventory, Application Management, and Compliance.
    I hope that helps,
    Nash
    Nash Pherson, Senior Systems Consultant
    Now Micro -
    My Blog Posts
    If you've found a bug or want the product worked differently,
    share your feedback.
    <-- If this post was helpful, please click "Vote as Helpful".

  • MS Office Pro 2013 Deployment through SCCM 2012 R2

    Hi Friends,
    I have deployed MS Office Pro 2013 through SCCM 2012. But from Windows 7 Client Machines It's not Installing. Noticed following error in Software Center.
    I'm testing two deployments before bring into production.
    Test Machine 1 :  Purpose = Available 
    From Software Center I have found Test Machine 1 is Status failed.
    Test Machine 2 : Purpose = Required
    From Software Center I have found Test Machine 2 is Status post due-will be retried
    The following Error code is same for both Machines.
    ====================================================
    The software change returned error code 0x87D00607(-2016410105).
    ====================================================
    Any idea please .
    Regards,Ali

    Hi,
    Check out this great guide from Ronni on how to deploy Office 2013 using Configuration Manager 2012, a good read.https://gallery.technet.microsoft.com/office/How-to-Deploying-Office-0f954e7f
    Are the content succefully deployed to all DPs?
    Regards,
    Jörgen
    -- My System Center blog ccmexec.com -- Twitter
    @ccmexec

  • SP1 does not get installed when the machine is set to Japanese Language, software push through sccm 2012

    Hi,
    Please help me with the below issue, iam trying to deploy Service pack 1 on Windows 7 , 32 Bit OS
    SP1 does not get installed when the machine is set to Japanese Language, software push through sccm 2012 , it does gets installed of installed manually, by remoting into the machine
    also it gets installed through sccm when the machine is set to english language, 
    Thank you
    Tanoj
    OSLM ENGINEER - SCCM 2007 & 2012

    Hi Friends,
    we are deploying the SP1 via SCCM 2012 , and the success rate is around 50 %, its a Light touch installation where user will initiate the installation via Software Center ( Web based )
    i was able to gather few errors , and this are the errors which failed during SP1 Installation 0x800f0828,
    some errors which sccm reports display are 
    11171
    10008
    10021-
    17031 - 
    1602 - User Cancelled installation
    113 - No more internal file identifiers available
    10070 - File handle reference is no longer available
    10050 - A socket operation encountered a dead network
    11170  - The task sequence manager could not successfully complete execution of the task sequence
    i could not find the reason for some of the errors, also i am looking for a fix/woraround if any
    Also i have noticed that in few computers the task seq failed at a place where after the sp1 installation a reboot happens and then PGP BYPASS utility is uninstalled, it did not start the PGP bypass uninstall after reboot
    is there a way to cut short the Task seq and keep it simple ?
    right now its like this 
    1. checking for prerequisite : checks for OS Name and OS version
    2. installs PGP Bootgaurd Bypass
    3. System Restart
    4. Installing Windows 7 Service Pack 1
    5. Final Restart
    6. uninstall PGP Bootgaurd Bypass
    Regards
    Tanoj
    OSLM ENGINEER - SCCM 2007 & 2012

  • How to deploy .msp files through SCCM 2012

    Team,
    Can you please help me to deploy .msp files through SCCM 2012?
    Regards,
    Mahadev Nitture

    I tried to search and got few things but didn't understand to proceed with.
    Please help me with this.
    Regards,
    Mahadev Nitture
    You can use a typical/standard application deployment method (just a minor change because of MSPfile).
    Here are some guides, for typical application deployment:
    http://technet.microsoft.com/en-us/library/gg682159.aspx
    http://www.gerryhampsoncm.blogspot.ie/2013/03/sccm-2012-sp1-step-by-step-guide-part_7075.html
    Familiarise yourself with these methods, then return to the example suggested by Torsten for specific steps for MSP:
    https://social.technet.microsoft.com/Forums/en-US/3dac27fd-ce4f-4d3d-946b-d08d4c7f5af5/best-way-to-deploy-an-msp?forum=configmanagerapps
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • How to reduce configuration cache file Quota size located in ( C:\Windows\ccmcache ) for all client from SCCM 2012 server

    How to reduce configuration cache file Quota size located in ( C:\Windows\ccmcache ) for all client from SCCM 2012 server
    Thanks in Advance
    NTRao

    Hi,
    There are numerous ways to change the cache size.
    You could deploy a vbscript to a collection of the devices.
    On Error Resume Next
    Dim UIResManager
    Dim Cache
    Dim CacheSize
    CacheSize=20000
    Set UIResManager = createobject("UIResource.UIResourceMgr")
    Set Cache=UIResManager.GetCacheInfo()
    Cache.TotalSize=CacheSize
    Or you could use a configuration item.
    http://blog.coretech.dk/heh/configuration-items-and-baselines-using-scripts-powershell-example/
    You can also use the right click tools by Now Micro on a collection, if all the servers are on this would be the easiest / quickest way.
    http://www.nowmicro.com/recast/right-click-tools/
    http://www.david-obrien.net/2013/02/how-to-configure-the-configmgr-client/
    select SMS_R_SYSTEM.ResourceID, SMS_R_SYSTEM.ResourceType, SMS_R_SYSTEM.Name, SMS_R_SYSTEM.SMSUniqueIdentifier, SMS_R_SYSTEM.ResourceDomainORWorkgroup, SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.OperatingSystemNameandVersion like '%6.2%'
    https://msdn.microsoft.com/en-us/library/windows/desktop/ms724832%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396

  • Deploy patches with SCCM 2012

    Hi,
    I have deployed non-security patches using SCCM 2012 for all Office products. However found some of the machines which is installed only Office 2007 still received Office 2010 updates. Is that expected behaviour. Can someone please confirm. 
    Regards,
    Madhan

    You might have office 2010 components installed (or viewers).
    Where do you see the updates on the clients?
    Ronni Pedersen | Microsoft MVP - ConfigMgr | Blogs:
    www.ronnipedersen.com/ and www.SCUG.dk/ | Twitter
    @ronnipedersen

  • Windows 8.1 clients are not detecting updates deployed to them through SCCM 2012 R2

    Hello, 
    We are using SCCM 2012 R2 to deploy software updates. 
    On Windows 8.1 SCCM does not show certain updates as being needed and isn't deploying them to the clients even though Windows Update will show them as high importance. These same updates are being detected and deployed to Windows 8 clients successfully.
    I believe that the update catalog that WSUS uses may have some incorrect detection rules for the following updates:  
    2917933
    2913320
    2913270
    2913152
    2909569
    2904440
    2904266
    2903939
    2899189 
    2893984
    2893294
    2892074
    2916626
    2898785
    My automatic deployment rules include Windows 8.1 in the product category. I have even created a standalone rule for Windows 8.1 that builds a new package and the behavior is the same. 
    We only have a handful of Windows 8+ clients so this hasn't been a big issue but others may want to keep an eye out. 

    I am also running into this issue.  After "checking online for updates" on one of my machines in office I found that there were 21 important updates for my 8.1 box.  When I cross reference them in SCCM under All Software Updates, it appears these
    8.1 updates are not listed.  They are however listed for all other OS.  
    10 seconds after typing this, I went in to verify my WSUS ->  Products and Classifications settings and come to find 8.1 and 2012 R2 weren't selected, even though it's an option in SCCM.  Go figure!  This wasn't the end though.  After
    running a Synchronization, my issue still wasn't resolved.  Went back to check my settings and they again were changed back to having these OS unchecked.  Finally, a solution!  I found that in SCCM, under Administration tab, Site Configuration
    > Sites > ABC - Mysitename, right click and scroll down to "Configure Site Components" > Software Update Point.  This setting (although the same as is in WSUS) takes precedence, thus was rolling my settings back to the original configuration
    in WSUS.
    So long story short, even though my automatic deployment rules stated approve all windows 7/8/8.1 criticals/importants, 8.1 was getting skipped for the most part because my WSUS server wasn't syncing with Microsoft for all of the updates I required.  I
    did have a couple of updates that squeezed through because they were categorized as "Security Updates for Windows 8, 8.1".
    Not sure if this is the solution you were looking for, but your thread got me started in the right direction, hopefully this response helps in the same way!
    Thanks!

  • Install offline update patches on SCCM 2012

    Dear every one,
    Could you help me how to install offline update patches for windows on SCCM 2012?
    Please show me some materials or any link to learn it
    I'm on my way to research and deploy it
    Thanks show much!!!

    Dear Arnavsharma,
    Yes, I mean to talk about MS updates.
    I have read your topic that you show, but my situation is difference
    the first purpose, I built SCCM 2012 to update Definitions for System center Endpoint Protection 2012 through Software update Point. It 's still working normally
    And now, I need to do more tasks with SCCM 2012. I need to deploy some specify offline MS update which locate in Server through SCCM.
    Because, this MS updates has been built reserved for my Company, so it's not available on Micsoft
    Could you help me ?

  • Windows 8.1 Custom Tiles - Deploying SCCM 2012 R2

    Confused.
    In Hyper V, I created a Windows 8.1 Enterprise image while in sysprep audit mode.
    I configured the tiles exactly how I wanted them.
    Captured the image and deployed.  When I login, the tiles are all set to default.
    Found a Microsoft site that said I could copy the AppsFolderLayout.bin file from the default image and then copy it to the default directory.   Tried that manually and through a task sequence and it still shows the default screen.
    I tried exporting the bin file through powershell and then importing through SCCM task sequence and same thing.
    http://stealthpuppy.com/customizing-the-windows-8-1-start-screen-dont-follow-microsofts-guidance/
    What is the best way to accomplish this?
    Thanks
    Rick

    Make sure you follow the steps exactly.
    http://blogs.technet.com/b/deploymentguys/archive/2012/10/26/start-screen-customization-with-mdt.aspx
    When the AppsFolderLayout.bin is copied to default profile, it will be copied to any new user profiles upon initializing first user logon. You could also manually copy the file to a user's profile to verify AppsFolderLayout.bin layout file.
    Juke Chou
    TechNet Community Support

  • Patch Management SCCM 2012

    Hi,
    I have few questions with respect to patch management through SCCM 2102, it give you a brief idea about the setup, this is what we have done:
    Seperate server with WSUS and SUP role installed. Single Primary Server
    We enabled Software Update clinet settings for a group of machines and I understand that this policy will create a local polcy in Windows update to point to the WSUS/SUP server - If I remove a machine from this group will that change the local policy
    on the respective machine?
    If both Specify intranet Mocrosoft update service location & Configure Automatic Updates
    are set to not configured will the machine still connect to windows update and download the patches without any administrative interventions?
    We wanted to have the patch management controlled only through SCCM - Can I disable the Configure Automatic Update ? or is it advisible to enable the
    Turn Off access to all Windows Update features ?
    When we click on Check for update on local machine, the result comes up with status
    "Windows is up to date", I hope this check is againt SCCM server ?
    Appreciate if someone can clarify me these questions...Many thanks!
    Raj

    First, please read the blog posts I've linked to above.
    Yes, setting the turn off access to Windows Update is generally a good thing to do. It does not disable Windows Update in any way, it just prevents users from using Windows Update.
    Yes, disabling the Configure Auto Update setting is also generally a good thing to do. This setting does not turn off the WUA though, it simply prevents it from autonomously performing activity which is not needed for use with ConfigMgr where all update
    activity is triggered by the ConfigMgr client agent (once again, read the blog posts).
    For clients that are on the Internet, they will *always* try to download updates from Microsoft first and not your Internet facing DP -- this is by default and not configurable -- thus your DPs availability on the Internet doesn't matter (unless the client
    can't reach Microsoft for some reason then it will try to fall back to your Internet facing DP).
    Jason | http://blog.configmgrftw.com | @jasonsandys

  • Deployed Windows 7 Image failing to start -SCCM 2012 SP1

    Hello, I am deploying windows 7 image using SCCM 2012 SP1, the installation goes thru fine but when it is in the process of restart, a blue screen is displayed for a split second and then it tries to reboot again with same results. Are there any logs on
    the SCCM server I can check to see where the problem may be?

    This generally means inaccessible boot device. How are you partitioning the drive and applying the image?
    This is one way to do it
    http://www.gerryhampsoncm.blogspot.ie/2013/02/sccm-2012-sp1-step-by-step-guide-part_18.html
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson

  • CRM2013 Silent deployment through SCCM 2012 R2

    Hello.
    First of all im sorry, if im posting in the wrong Forum - but this seemed as the correct one.
    I want to deploy CRM 2013 Outlook Client, through Software center - but i cant seem to get it working.
    I cant seem to find a way, to disable / accept the License Agreement automatically, so that our Domain Users can enjoy a completely silent CRM deployment.
    I have tried several guides, and i have also tried with SetupClient.exe /A - and the "guide" completes, but theCrmClient_32.msi dosent work.
    I would really appreciate, if some of you guys would help me out :)
    We are using SCCM 2012 R2
    Datatechnician

    Looks like you need the /Q switch for this
    http://msdn.microsoft.com/en-us/library/hh699665.aspx
    /Q              
    Quiet mode installation. This parameter requires a configuration file in XML format. The /i parameter contains the name of the XML configuration file. No dialog boxes or error messages will appear on the display screen. To capture error message information,
    include the log file parameter (/L or /LV).
    Gerry Hampson | Blog:
    www.gerryhampsoncm.blogspot.ie | LinkedIn:
    Gerry Hampson | Twitter:
    @gerryhampson
    Hello.
    Ive found the solution my self :)
    SetupClient.exe /quiet /passive /norestart
    I didnt thought that you could have a /q and /p at the same time
    Datatechnician

Maybe you are looking for

  • Is it possible to have the new tab page appear by default when Firefox starts?

    Can Firefox be set to display the new tab page when starting the browser? In Options > General, the only choices under "When Firefox starts" is show the home page, a blank tab, or restore previous session. Alternately, can the new tab page be set as

  • Where to find package language for ISM-SRE-300-k9 CUE 8.6.1

    Hi, I need to add a new language package in  ISM-SRE-300-K9. Currently it has CUE Voicemail European Spanish (Spanish language pack) (8.6.1) but I need Spanish Mexican. I have read the procedure to add  additional package but I can't find the package

  • [SOLVED] Slow read speeds from a DroboFS mounted in fstab via cifs

    I've decided to move all my media over to my drobofs which I have and I've mounted the share on the drobo in fstab this way: //mydrobofs/Media /media/drobofs cifs iocharset=utf8,uid=af,gid=users,guest,dir_mode=0775 0 0 The share is mounted fine at bo

  • In Message tab message missing while importing wsdl

    My scenario is a file to webservice to Idoc scenario. 1.We first send a request file to XI to start the BPM receive step. 2.the request message goes to a webservice and fetches a response structure and 3.The response structure maps to idoc and finall

  • Changing the file type as.....in FileDialog Box

    hi i wanted some help in file Dialog box...... as soon as i click the browse button in my java program....a window opens which is the file dialog.... the option specified below is file type as .... i'm getting only 1 option i.e file type as - all fil