WSUS Updates to Available and Required collections - multiple deployment packages?

Question

Hi, I'm trying to follow various documents but cannot find a single unified methodology for how WSUS updates are now supposed to work
I am creating software update Groups and trying to keep them under 1000 updates each as they take 2 hours or so.
So i have a Pre2103, All2013, 2014January to May, 2014 June to September and starting from this month i will do one monthly
My Client base is servers or workstations. I have 2 collections - Available (DCs SQl etc that need manual intervention) and Required (everything else)
So i now create a deployment package for each group - but now i have to do that twice? Once for available collection and once for required collection? Am i missing an easier/better way of doing this?
Once these have all been set up do i then have to deploy them with an ADR? Inject them into the Gold image of my workstations?
I would like the internal WSUS to work exactly like (or as near as can be) to the way microsoft's works. EG if i take a vanilla windows 7 or 8 build and connect it to my network, it gets the GPO, installs the client then goes to SCCM and gets alll the updates
to bring itself up to date without me having to then go back into SCCM and create a specifc deployment of job or to manually send out anything.
Or will this only work when the collection gets updated and is aware of the new computer?
Thanks

Answer 1

OK i'm doing this now. As in the initial message i posted, everything up til 14th October is
done and dusted. I have 4x Software Update groups. Pre2013, All2013,2014JantoMay and
2104JunetoSept
For each of these groups, i created a Folder under the root All Software Updates", filtered
my searches and moved each grou of updates into its own folder for neatness, as well as a
"Superseded and Expired" folder
To deploy each of these i HAD to create a deployment package for each. Only done "Required"
so far so i have 4 Deployment packages.
So, now i am going to step through what i think i need to do to set up updates released on or
after 14/10/2014
I have no software update group or deployment package for October's releases and no ADRs at
all.
Just a list of 232 updates in All Software Updates. I deleted expired and superseded etc.
In this view, there are 64 Assets total. 7 unknown!!? What does this even mean? How do i find
out which are unknown? In the all device list, they are either clients or not. Nothing says
unknown!! Anyway thats for later...
I have 2x collections. WSUS-Available (x23) and WSUS-Required (x41)
None of the 232 updates are downloaded and theres a mixture of required not required and
percent compliant. .
I have a workstation on the domain and have run a windows update (updates managed by my
system administrator) and it says Up to date - and it takes ages.
If i change this to "Check fromo Microsoft" i get 42 important updates and 34 optional
updates available. This is my target scenario to hit from SCCM WSUS
OK here goes.
I select all 232 updates and move them to a folder called 2014October
i go to Automatic Deployment Rules and Create a new one called WSUS2014Oct-Required
select Patch Tuesday Template
Collection is WSUS-Required
create a new software update group
Auto Deploy
Released last 2 weeks - every update classification
Run on a schedule - every second tuesday
Client local time
1hour / as soon as possible
default/default/default
now i need to create a new deployment package. Call it WSUS2014Oct
Point it at sources and a folder called 2104October
Now i choose Download software updates from a location on my network and select the local
drive "E:\WSUS\WSUSContent" folder
So now i have a "Required" ADR and i click Run Now
BUT now i need to do one for the Available group as well. I notice that during the ADR i
cannot select Required or Available.
So i guess i need to suppress reboots on Servers then?
Also if i am using the same deployment package, why do i need to reselct the download
location again? its the same updates
Also, now that i have 2x ADRs the first one i created creates the deployment package and the
second ADR now points to that deployment package too so i now dont have separate packages to
monitor
Also, after running them both i get errors and no software update groups are created. So im
guessing thats the problem as the error is 0x80070002 the file you specificed could not be
found
also get error on the available group saying Auto Deployment Rule download failed
This is ridiculous. Why does creating an ADR allow creation of a SUG if it doesnt work.
Very frustrated