How do you Push applicationupdates?

[silvestre]

Hi I am using SCCM at the moment to install application updates like flash and java. But they release updates every week and taking time. So was wondering how do you guys do it?

[Blue_Cookeh]

Hi I am using SCCM at the moment to install application updates like flash and java. But they release updates every week and taking time. So was wondering how do you guys do it?

 

Are you using SCUP to publish those?

 

We killed off Java, and Flash will be going soon enough.

[jcs808]

PDQDeploy

[silvestre]

Using SCUP but not for the Laptops as they update when started and annoying when children start the laptops.

[silvestre]

PDQDeploy

 

$450 , we do not have that kind of money :-(

[thimon]

$450 , we do not have that kind of money :-(

 

We've purchased PDQ Deploy, but only after we used the free version for a while. Would recommend trying it, the free version may suit you fine.

 

Group Policy deployments? We install a few bits of software this way.

[angrycomputingteacher]

I've found EMCO Software Package installer or whatever to be useful.

[Paid_Peanuts]

For that kind of stuff: PDQ Deploy and PDQ Inventory. Set and forget. Best $900 or so a year we spend

[jdell]

SCCM is perfectly designed to support the deployment of such applications. The question is why are you deploying software updates weekly? Why are you not using GPO's to disable auto update on the applications and then choosing a stable version of the software and running with that for a set time frame. We generally run term to term with a single version then download, UAT and deploy the next version as a supersededance in SCCM so that we have a constant state of stable systems. With Java, Flash etc we usually run one back from the current version depending on the release notes etc. Proper software management is key, in any enterprise environment it is not a good idea to run the bleeding edge version of software.

[DavR]

I'm using SCCM also, but only doing updates for Flash or Java every six months or so, as I get the time or when something particular demands it.

 

I do find SCCM unreliable for uninstalling old versions (possibly because I have software install in my Task Sequence, as well as Deployed), so I have to write a uninstall old / reinstall new script for each update, which isn't ideal.

[pete]

I use WSUS Package Publisher* (SCCM-lite). Grabbing, testing and pushing out to initial test groups for a flash/java/reader update takes maybe 15 minutes. Let it sit in the test group for a day or two (assuming it's not an actively-targetted 0-day) and then push out everywhere else unless there are problems.

 

Updates for desktops are installed at 4pm or later, depending on when the machine is shut down. Installs can happen on a daily basis (if something's really behind on patches), but patches are pushed out midday on a Thursday for install late that afternoon.

 

*https://wsuspackagepublisher.codeplex.com/

Edited July 21, 2016 by pete