SCCM 2012 - Separating Software Updates

[FN-GM]

Hi,

 

I never used to deploy software updates to servers via SCCM. But I want to do that now.

 

For the clients I have created the attached search. It works just fine. I can create one for the servers the same they display just fine. The problem is some updates for example KB890830 apply to both Windows Client and server OS. If I deploy it in the client update search it will not appear in the server update search because it has already been deployed with the clients. How can i get around this little issue please?

 

Thanks

[FN-GM]

Anyone please? Maybe @Gatt

[sonofsanta]

I may be wrong here - I still do my server updates manually so I know a) what's going on (i.e. not IE11) b) when it's happening - but I think the software update engine knows only to install applicable updates. So you could push out all your updates, client and server, to everything, and the devices will cherry pick the ones it actually needs.

 

Test this first - it is a suspicion of mine, not a confirmed fact.

[Gatt]

Hi,

 

I never used to deploy software updates to servers via SCCM. But I want to do that now.

 

For the clients I have created the attached search. It works just fine. I can create one for the servers the same they display just fine. The problem is some updates for example KB890830 apply to both Windows Client and server OS. If I deploy it in the client update search it will not appear in the server update search because it has already been deployed with the clients. How can i get around this little issue please?

 

Thanks

 

Yep that's fine....

In the results select the Update(s) you want

Review & Accept any EULA's

Add it to a Software Update Group

Goto the Software Update Group node

Right Click you new Software Update Group and Choose deploy

Follow through the wizard and tell it what collection to use, what deployment package, etc

 

once done it will distribute to all the devices in the chosen collection

 

I have 3 collections:

 

Updates - Workstations

Updates - Servers

Updates - Global (which just includes the 2 collections above)

 

I then do 3 searches and link to the collections as applicable

 

Workstations - Windows 7, Windows 8 & Windows 8.1 ===> Deployed to "Updates - Workstations"

Servers - Windows 2008 R2, Windows Server 2012, Windows Server 2012 R2 ===> Deployed to "Updates - Servers"

Applications - Eg Office, etc ===> Deployed to "Updates - Global"

[FN-GM]

I may be wrong here - I still do my server updates manually so I know a) what's going on (i.e. not IE11) b) when it's happening - but I think the software update engine knows only to install applicable updates. So you could push out all your updates, client and server, to everything, and the devices will cherry pick the ones it actually needs.

 

Test this first - it is a suspicion of mine, not a confirmed fact.

 

That is what we used to do. But we have too many servers now.

 

Yep that's fine....

In the results select the Update(s) you want

Review & Accept any EULA's

Add it to a Software Update Group

Goto the Software Update Group node

Right Click you new Software Update Group and Choose deploy

Follow through the wizard and tell it what collection to use, what deployment package, etc

 

once done it will distribute to all the devices in the chosen collection

 

I have 3 collections:

 

Updates - Workstations

Updates - Servers

Updates - Global (which just includes the 2 collections above)

 

I then do 3 searches and link to the collections as applicable

 

Workstations - Windows 7, Windows 8 & Windows 8.1 ===> Deployed to "Updates - Workstations"

Servers - Windows 2008 R2, Windows Server 2012, Windows Server 2012 R2 ===> Deployed to "Updates - Servers"

Applications - Eg Office, etc ===> Deployed to "Updates - Global"

 

Thanks, this should work