Third-Party Updates Archives - Justin Chalfant's SCCM Guides https://setupconfigmgr.com/category/sccm-guides/third-party-updates Just Another SCCM Blogger Fri, 11 Mar 2022 19:49:12 +0000 en-US hourly 1 https://wordpress.org/?v=6.6.1 https://setupconfigmgr.com/wp-content/uploads/2018/05/Logo-150x150.png Third-Party Updates Archives - Justin Chalfant's SCCM Guides https://setupconfigmgr.com/category/sccm-guides/third-party-updates 32 32 Remove a Central Administration Site in Configuration Manager (SCCM) https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm#comments Fri, 11 Mar 2022 19:49:12 +0000 https://setupconfigmgr.com/?p=33181 The post Remove a Central Administration Site in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

]]>

Overview

  • In this video, we will review how to remove a central administration site in SCCM. We will cover the requirements for the removal and how to perform the removal.

Topics in Video

  • Introduction: (0:00)
  • DJam – History of CAS and Why They May Need to be Collapsed: (0:57)
  • Overview of Our Current Lab Environment & Plan for the CAS Removal: (11:26)
  • Reassigning Clients Before Uninstalling Second Primary Site: (14:11)
  • Removing Boundaries & Site System Roles Before Uninstalling Second Primary Site: (18:30)
  • Optional Step – Uninstall Client Agent Before Uninstalling Second Primary Site: (21:52)
  • Uninstall Second Primary Site: (22:55)
  • Removing Reporting Services Role from CAS & Reconfiguring on Standalone Primary Site: (25:36)
  • Going Over Site Roles That Do Not Need to be Removed from the CAS: (32:54)
  • Looking at Prerequisites to Remove the CAS: (34:26)
  • Removing the CAS: (34:50)
  • Unpublish CAS Object from Active Directory: (37:20)
  • Reviewing Standalone Primary Site after Removal of the CAS: (38:33)
  • Performing Post-Setup Tasks: (39:26)
  • Overview of Potential Hash Errors if you Manage Third-Party Updates: (41:44)
  • Exporting Patch My PC Publisher Settings & Certificate from CAS: (46:58)
  • Importing Publisher Settings & Certificate to Standalone Primary Site: (49:52)
  • Solution for Third-party Update Hash Errors After Removing the CAS: (52:24)
  • Reconfiguring Boundaries and Boundary Groups: (57:02)
  • Wrap-up: (59:03)​

Helpful Resources:

The post Remove a Central Administration Site in Configuration Manager (SCCM) appeared first on Justin Chalfant's SCCM Guides.

]]> https://setupconfigmgr.com/remove-a-central-administration-site-in-configuration-manager-sccm/feed 3 Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm#respond Wed, 15 Apr 2020 12:00:00 +0000 https://setupconfigmgr.com/?p=32807 The post Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM appeared first on Justin Chalfant's SCCM Guides.

]]>

Overview

  • In this video guide, Cody Mathis and Justin Chalfant from Patch My PC will review common issues that can arise with third-party patch management through Cloud Management Gateway in Microsoft Configuration Manager (SCCM). We will review common issues that can arise with third-party updates such as content not distributed to CMG, CMG authentication to the SUP site system, certificates, content lookups, policy, and more.

    Helpful Resources

    The post Deep Dive Third-Party Update Considerations with Cloud Management Gateway (CMG) in SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/third-party-update-considerations-with-cloud-management-gateway-cmg-in-sccm/feed 0     Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm#comments Mon, 11 Feb 2019 14:21:14 +0000 https://setupconfigmgr.com/?p=28390 The post Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>

    Overview

    • In this video guide, we will be covering how to use a shared WSUS database for multiple software update points in SCCM. Using a shared WSUS Database is generally considered a best practice in well-connected scenarios since this offloads the vast majority of network impact if a client were to switch SUPs in SCCM.

    Topics in Video

    Commands and Notes:

    • Powershell command to see WSUS installed role services: Get-WindowsFeature -Name UpdateServices*
    • Powershell command to remove WSUS WidDB: Remove-WindowsFeature -Name UpdateServices-WidDB
    • Powershell command to install WSUS SQL Database Connectivity: Install-WindowsFeature -Name UpdateServices-DB
    • WsusUtil command: WsusUtil.exe postinstall SQL_INSTANCE_NAME=”SCUP.CONTOSO.LOCAL” CONTENT_DIR=”\\SCCM3-DPMPSUP-1.CONTOSO.LOCAL\WSUS”
      • SQL_INSTANCE_NAME and CONTENT_DIR should be changed to for your environment details

    Helpful Resources:

    The post Deep Dive How to Configure a Shared WSUS Database for Multiple SUPs in SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/how-to-configure-a-shared-wsus-database-for-multiple-sups-in-sccm/feed 19     PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup#comments Mon, 17 Sep 2018 14:43:23 +0000 https://setupconfigmgr.com/?p=28212 The post PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP appeared first on Justin Chalfant's SCCM Guides.

    ]]>

    Overview

    • In this video guide, we will cover how you can use a code-signing certificate from an Active Directly Certificate Services infrastructure or using a public certificate authority such as DigiCert for signing third-party software updates in Microsoft System Center Configuration Manager (SCCM). Using a trusted PKI based code-signing certificate can be an alternative to using a self-signed certificate.

    Topics in Video

    Helpful Resources:

    The post PKI Code-Signing Certificate for Third-Party Updates in Microsoft SCCM/SCUP appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/pki-code-signing-certificate-for-third-party-updates-in-microsoft-sccm-scup/feed 2     Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning#comments Mon, 04 Jun 2018 16:50:05 +0000 https://setupconfigmgr.com/?p=27895 The post Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning appeared first on Justin Chalfant's SCCM Guides.

    ]]>

     * Updates * 

    • Do NOT remove the “all” in the language script (Decline-Windows10Languages.ps1) as I did in the video at 25:14. This change is not required or recommended.
    • It’s recommended to first run the script with the -Whatif switch or option in the config.ini to see what will be declined.
    • Update: in the latest script, you can use a config.ini file rather than a bunch of PowerShell parameters. Here’s the config.ini I’m now using instead of parameters.
      • Here’s what the updated script folder structure looks like
        • wsuscleanupscript-newfiles

     

     

     

    Overview

    In this video guide, we will walk through the process of maintaining our WSUS catalog to reduce the catalog size and client scanning issues. In this guide, we will cover ensuring the IIS AppPool for WSUS is improved, indexing the SUSDB, setting up a task to run a script to automatically decline any superseded updates, change the wsyncmgr purge of expired updates from 7 days to 0. and compare the initial catalog download size on a client.

    There’s a lot of good WSUS maintenance scripts out there now. In my video, I used Bryan Dam’s script. See the resources below for a lot of great information that will be helpful in addition to what I cover.

    Creating a Scheduled Task to Automate the Declining of Updates

    • Scheduled Task Options for Bryan Dam’s WSUS Scripts

    Topics in Video

    Resources for This Guide:

    Arguments for Scheduled Task:

    Note: you will need to change the script path


    -NoLogo -NoProfile -NonInteractive -ExecutionPolicy ByPass -command J:ScriptsInvoke-DGASoftwareUpdateMaintenance.ps1 -DeclineSuperseded -UpdateListOutputFile J:ScriptsDeclinedUpdates.csv -DeclineByTitle @('*Itanium*','*ia64*','*Beta*') -DeclineByPlugins -CleanSUGs -RemoveEmptySUGs -RunCleanUpWizard -Force

    The post Deep Dive Maintaining the WSUS Catalog by Declining Updates for Better Update Scanning appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/deep-dive-maintaining-the-wsus-catalog-by-declining-updates-for-better-update-scanning/feed 35     Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https#respond Sat, 02 Jun 2018 16:31:00 +0000 https://setupconfigmgr.com/?p=32891 The post Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS appeared first on Justin Chalfant's SCCM Guides.

    ]]>
     

    Overview

    • This guide covers considerations for third-party software updates in Configuration Manager when using a remote software update point (SUP) that is not configured for SSL.

    Topics in Video

    • Intro: (0:00​)
    • Review remote site system running SUP in HTTP mode: (1:30​)
    • Enable third-party updates and Configuration Manager managed the certificate: (2:15​)
    • wsyncmgr.log error Warning: Remote WSUS connection is not HTTPS. This prevents software update point from getting the signing certificate for third-party updates.: (2:50​)
    • Review the SMS_ISVUPDATES_SYNCAGENT.log: (3:45​)
    • Stage the content for selected categories automatically: (6:00​)
    • SMS_ISVUPDATES_SYNCAGENT.log syncing catalog: (7:15​)
    • SMS_ISVUPDATES_SYNCAGENT.log: error NO_SIGNING_CERT: (8:00​)
    • Create a WSUS Signing Certificate using Patch My PC’s Publisher: (11:00​)
    • Export and Deploy WSUS Signing Certificate using a GPO: (14:15​)

    Helpful Resources:

    The post Third-Party Software Updates in ConfigMgr when SUP/WSUS is Remote and not Running in SSL/HTTPS appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/third-party-software-updates-in-configmgr-when-sup-wsus-is-remote-and-not-running-in-ssl-https/feed 0     Enabling Third-Party Software Update Catalogs in Microsoft SCCM https://setupconfigmgr.com/enabling-third-party-software-update-catalogs-in-microsoft-sccm https://setupconfigmgr.com/enabling-third-party-software-update-catalogs-in-microsoft-sccm#comments Sat, 02 Jun 2018 08:00:00 +0000 https://setupconfigmgr.com/?p=28136 The post Enabling Third-Party Software Update Catalogs in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>
     

    Overview

    • In this video guide, we will be covering how to configure the third-party software update catalogs feature added in SCCM 1806. This video guide covers enabling your software update point for third-party software updates, setting Configuration Manager to manage the certificate, enabling the client setting to enable third-party software updates and configure the Patch My PC Update Catalog in the third-party software update catalog node of SCCM.

    Topics in Video

    Topics Mentioned in Video

    Helpful Resources:

    The post Enabling Third-Party Software Update Catalogs in Microsoft SCCM appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/enabling-third-party-software-update-catalogs-in-microsoft-sccm/feed 4     How to Create, Manage, and Deploy Applications in Microsoft SCCM (EXE and MSI Installs) https://setupconfigmgr.com/how-to-create-manage-and-deploy-applications-in-microsoft-sccm-exe-and-msi-installs https://setupconfigmgr.com/how-to-create-manage-and-deploy-applications-in-microsoft-sccm-exe-and-msi-installs#comments Wed, 30 May 2018 22:51:00 +0000 https://setupconfigmgr.com/?p=28423 The post How to Create, Manage, and Deploy Applications in Microsoft SCCM (EXE and MSI Installs) appeared first on Justin Chalfant's SCCM Guides.

    ]]>

    Overview

    • In this video guide, we will be covering how to create, manage, and deploy applications in System Center Configuration Manager (SCCM). We will create applications for Notepad++, Google Chrome, Flash Player, and 7-Zip. This guide will cover both MSI and EXE based application creation and deployment. We also include the components of applications including deployment types, content, detection methods, requirements, supersedence, dependencies and more.

    Topics in Video

    Helpful Resources:

    The post How to Create, Manage, and Deploy Applications in Microsoft SCCM (EXE and MSI Installs) appeared first on Justin Chalfant's SCCM Guides.

    ]]>     https://setupconfigmgr.com/how-to-create-manage-and-deploy-applications-in-microsoft-sccm-exe-and-msi-installs/feed 23