It depends on the severity of the update. Usually, I stay up to date about any out-of-band updates on places like Twitter for example.

How would or do you manage the situation of these updates being released after patch Tuesday or would you wait to pick these up the following month.

Thanks in advance

Hi Eduardo,

Did you get to the bottom of this? Our environment is doing similar, all updates used to work perfectly, we did switch over to co-management for the devices with inTune integration though. Aside from that, not much else has changed.

Thanks.

When they install would be based on the deadline time, not the available time.

It could be a boundary issue or maybe GPO conflict for WSUS.

I just created a new SCCM server (SCCM 1910) to replace a really old SCCM server that we have. I followed all your videos for the set up but I hit a roadblock. Everytime that I try to deploy windows updates that are required, all the client get stock with status Downloading (0% completed) and in the SCCM server monitoring status reports with error code 0X80D02002 (Unknown Error (-2133843966)).

I reset the windows updates in the clients but nothing. Could it be firewall issue, boundary issue…?

I previously was able to update with Thrid-party updates (Adobe Reader) and I also was able to deploy a feature update (1903) for a windows 10 machine.

Any info will be appreciated. Thanks

Correct

So is it correct to assume that your UNC path (\\sccm\Sources) is a share of the I:\ disk named “SCCM_Application_Sources” from the “01 – How to Install…” video?

Sorry for the delay did you figure this out?

It was pre-created you can use whatever share name you want.

What a fantastic tutorial and thank you for posting it.

What is the best approach if the server fleet were last updated

for example

Server 2008- 2008R2 fleet have their last updated time with various dates from Jan 2014-June 2016
Server 2012- 2012R2 fleet was updated with various dates from Jan 2015-December 2016

Hundreds of servers with various last updates.

What happens if I do a search for say Critical Updates, Security Updates, Service Packs, Update Rollups and Updates for Jan-December 2014 and push them out to the 2008-2008R2 fleet, what happens if the updates is not required on the server (as in it is already patched with it)

or is there anther better approach

Best regards

Rob

Correct, the deployment doesn’t need to be deployed directly to the collection the maintenance window is set on. It will abide by any maintenance window the device is in for any other collection.

MaintenanceWindow
Collection A
Collection B
Collection C

and i add A and C to the MaintenanceWindow collection, then do a deployment to Collection A it will automatically use the maintenance window?

Great video! Thank you for doing these.

Wondering if you could explain the different Products under the SUP properties. I see some in there for Windows 10 GDR, GDR-DU, update drivers, upgrade and servicing drivers, etc.

Sorry if this was explained somewhere else.

Thanks!

Good topic I have one for WSUS cleanup could probably do something for SCCM.

Can you do a video on SCCM Maintenance, such as Daily, Monthly. etc.

The SCCM agent can set any GPOs needed for software updates locally.

thank you so much for this video but I’ve a question: before doing this steps we need to create a GPO correlated to SCCM regarding Windows Updates?

If yes what is the settings that you suggest to set?

Best Regards

Yes, the clients will download content from the deployment package. This is covered in the video guide.

Thank you Justin and the remote clients receive updates through the local DP here? If yes do i need to create packages etc? Sorry just got into this and not quite sure on having this setup/configured?

For that small of a number as long as you have an okay connection between the sites, you could probably run with one software update point

Thanks Justin for coming back on this. we have roughly 40-50 clients at all the remote sites.

How many clients are in the remote sites?