Available Microsoft Updates Not Appearing In SCCM Software Center

[Fazza]

Until now we've only ever used SCCM to manage Endpoint Protection, Deploy 'golden images' via PXE and install available software via the Software Center but now I'm trying to make a Microsoft Update available from the Software Center using the SCCM Software Update Point.

 

I've created a Device Collection containing 3 test PCs I've got. I've deployed a update to the software group by making it available but it's not showing up in the Software Center on any of the machines. I know Software Center is working as I have removed a couple of outdated software applications and on the test machines when I run the Actions in the Configuration Manager control panel applet the programs I have removed disappear from Software Center proving it's connecting to the server and updating OK.

 

As I've never used SCCM Software Update Point are there any settings I perhaps need to check?

[ChrisH]

Have you checked them under monitoring to see if they show a client checked passed/active state? The big one that breaks this is a conflicting GPO for WSUS settings. Also as usual it seems to do things when it wants a lot and not when prompted by run manually clicking on the scans in the control panel.

[Fazza]

Client Activity is showing as Active and Check Result is Passed.

 

I removed all of the WSUS GPOs years ago and set the settings in the SCCM client to use SCCM for Microsoft Updates - as (up until now) no Windows Updates were configured so when the PCs checked for updates they get told there arent any by SCCM so none get installed. That way the only way they can do the updates is manually by themselves by clicking connect online, that way they are in control of when the updates get done as too many dont shutdown properly so when they do, this way prevent the old '127 Updates' installing!

[ChrisH]

When your look at the actual updates do they show as required for computers? You can also use some of the compliance reports to let you know more detail about what computers need what update etc. Apart from that you need to delve into the client logs. Edited January 17, 2018 by ChrisH

[Fazza]

I thought Required would mean they would automatically install without the need for the user to go in to the Software Center? I've tried both Required and Available and have left them as Available as that's what I've done for the optional software they can install and all that has always appeared OK in the Software Center.

 

I'm new to using SCCM for Microsoft Updates so appreciate your help

[ChrisH]

I meant under software updates it shows all the computers that require an update, this will show all computers that need it that fall under the scope of you CM and not just the ones you have deployed it to:

 

[Fazza]

I meant under software updates it shows all the computers that require an update, this will show all computers that need it that fall under the scope of you CM and not just the ones you have deployed it to:

 

[ATTACH=CONFIG]47169[/ATTACH]

 

Oh, I see!

 

In that case the answer is no, it doesnt appear to be required.

 

 

What do I need to do to make it required? We've got 759 computer in SCCM so surely it must know some of them require it or am I not doing something?

 

 

Each time I search the internet for information on how to deploy software updates via SCCM all i seem to get it websites showing how to install it - that bit I've done I just need to learn how to use it so if any one has come across a website that might help then please let me know!

[ChrisH]

Again then it looks like the clients aren't actually looking towards your SCCM (WSUS in the background) for updates assuming correct updates and architecture. I would have a look in the client windows update log to see where they are trying to contact. I have nearly everything running smoothly apart from AV updates to Windows 10, that just doesn't want to work for me. Edited January 18, 2018 by ChrisH

[Fazza]

OK, I'll take a look at some logs then. When I click on All Software Updates and list all of the updates there are loads of them that are required including a few where several hundred are listed as required.

[Fazza]

I've found the log file I need to look at (WUAHandler.log) and I can confirm that it is indeed pointing to our SCCM server for updates, however there are a few errors I need to look in to now:

 

[Fazza]

***ALL SORTED***

 

The clients were correctly pointing to our SCCM server but after looking in the logs they were generating an error code 0x80244022 which means the client can see the SCCM server but one of the services isnt giving a reply.

 

I checked the normal Windows Services and they were all OK but I have now learnt that their are some Services in the IIS Manager and it was the WsusPool service that had stopped, so I started it and then had to reboot the SCCM server to get things to work!

 

[ChrisH]

I think I know what your issue is, one of the pools gets overloaded in IIS and you need to increase a setting somewhere, I will try and find the fix for you.

 

Edit: This one:

 

https://blogs.msdn.microsoft.com/the_secure_infrastructure_guy/2015/09/02/windows-server-2012-r2-wsus-issue-clients-cause-the-wsus-app-pool-to-become-unresponsive-with-http-503/

Edited January 18, 2018 by ChrisH