Updating Adobe Creative Cloud - AUSST & RUM

[Fazza]

We've got the Adobe Creative Cloud suite installed on most of our Student and Staff computers (several hundred) and at the moment we have to go around manually running the updates on the Student computers and if we update too many at once our Internet connection grinds to a halt!

 

I've installed the Adobe Update Server Setup Tool on a Windows 2022 Server and copied the .overrides file to a test PC that has Adobe CC installed on it and now when I manually run the updates from the Creative Cloud Desktop app instead of using Adobes servers on the Internet it uses our local AUSST server so no more Internet grinding to a halt (we hope)!

 

How can we automate the update process of Adobe CC?

 

I've just been reading about RUM (Remote Update Manager) but that is implying that it needs to be installed (and run) on each machine we have Adobe CC installed on - can this be scheduled to run or run remotely from a server so that all PCs update at a scheduled time?

 

How do you guys manage the updates of Adobe CC?

 

[MYK-IT]

Could use PDQ Deploy to execute the update (even the free version with one step limitation would suffice)

 

Example, cmd /c "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe"

[Fazza]

Could use PDQ Deploy to execute the update (even the free version with one step limitation would suffice)

 

Example, cmd /c "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe"

 

I'm kinda thinking to have it run as a scheduled task - set to run every 2 weeks and to "run task as soon as possible after a scheduled start is missed".

 

Just got to figure out the easiest way to deploy the .overrides file to all the PCs and then we'll be good to go!

[MartinByard]

We've had our AUSST server up and running for a while now, and have got our override details input into the Admin control panel in the cloud so when we create the Adobe packages to install the apps, the overrides are already present.

 

 

Then we have a scheduled task that runs the remote update manager (also added as part of the package created from the admin control panel), which runs once a week (probably a bit too often, but our feeling was better safe than sorry) late friday afternoon / early evening.

$DT = Get-date -Format yyMMdd

if(!(Test-Path "C:\Windows\Logs\Adobe_RUM")){
New-Item -Path "C:\Windows\Logs" -Name "Adobe_RUM" -ItemType Directory -Force
}

Start-Transcript -Path C:\Windows\Logs\Adobe_RUM\Adobe_RUM_$DT.log -Force

$StartTime = Get-date -Format HHmm

Write-Host "Started at $StartTime"

Start-Process -FilePath "C:\Program Files (x86)\Common Files\Adobe\OOBE_Enterprise\RemoteUpdateManager\RemoteUpdateManager.exe" -Wait

If(Test-Path 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe\Adobe*.lnk'){
Move-Item -Path 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe*.lnk' -Destination 'C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe' -Force -Verbose
}

$StopTime = Get-date -Format HHmm

Write-Host "Started at $StopTime"

Stop-Transcript

The main thing to remeber (if it applies to you) is that for whatever reason macOS devices can't use it, if you give them the override then they will just sit there doing nothing.

[Koldov]

Probably being really slow on the uptake here... but did you disable the app auto update setting for some reason?

 

 

I thought it defaulted to on?

 

[Fazza]

Probably being really slow on the uptake here... but did you disable the app auto update setting for some reason?

 

[ATTACH=CONFIG]71729[/ATTACH]

 

I thought it defaulted to on?

 

[ATTACH=CONFIG]71730[/ATTACH]

 

Not that I'm aware off but it was originally set up at least 2 years ago now!

 

Does that handle both security updates and application upgrades do you know?

It could be that it was turned off originally as we only have a 1Gbps internet connection and when we run the updates (manually) on 32 PCs in a computer suite it utilises all the bandwidth and out internet grinds to a halt on the other computers so if we have 500+ computers all randomly updating/upgrading Adobe all the time we could have internet bandwidth issues. Now we have a caching server (the Adobe AUSST) this is no longer an issue.

 

Is there a way to turn the Auto Update on or is a re-install required with the settings changed that way?

[Fazza]

Testing of AUSST and RUM has gone well on my test PC so I'm moving on to creating a new install package that can be deployed whenever we re-image a machine so all the overrides settings are set automatically...

 

 

The option to use AUSST is greyed out - what's going on?!

[Koldov]

Does this help?

 

https://community.adobe.com/t5/enterprise-teams-discussions/create-a-package-can-t-select-quot-redirect-to-internal-adobe-update-server-quot-it-s-greyed-out/m-p/10919041#:~:text=I%20figured%20it%20out%2C%20you%20need%20to%20add%20the%20ovveride%20XML%20in%20prefs%2C%20first%2C%20then%20the%20option%20appears!

 

"Hi,

 

When I use the desktop app to create install packages I have no problems adding the override files, but that only works for 2018 and older apps.

 

When I try and use the web-based tools, the Redirect to internal Adobe update server option is greyed out.

 

Any ideas?

 

OK,

 

I figured it out, you need to add the ovveride XML in prefs, first, then the option appears!"

[Fazza]

Never got around to setting RUM to run as a scheduled task so our Technician has been manually running the auto update each half-term break on all the computers in the computers, up until now that is!!...

 

PANDA360 Adapative Defence (or whatever it is now) that protects our endpoints from malware and ransomware etc. also does our Patch Management so we remain cyber-secure is now able to schedule in the running of RUM on the machines so as long as we have the .overides file in place (we push that out via a script in SCCM) then it updates Adobe CC from our AUSST RUM server!

 

 

Only query I have now is how to automate the updating of the server!

 

I'm assuming I can run the incremental update command can cleanup command via a scheduled task??

[MartinByard]

Yes, thats what we do - on a weekly schedule every sunday morning it checks for incremental updates.

 

We did have it doing the cleanup as well, but it would intermittently remove things it shouldn't (e.g all Photoshop downloads) so we removed that and just keep an eye on the disk space its using and when it runs out run a --fresh command to remove everything and start again.

[Fazza]

Yes, thats what we do - on a weekly schedule every sunday morning it checks for incremental updates.

 

We did have it doing the cleanup as well, but it would intermittently remove things it shouldn't (e.g all Photoshop downloads) so we removed that and just keep an eye on the disk space its using and when it runs out run a --fresh command to remove everything and start again.

 

LOL - nothing surprises me with AUSST any more! Way back in 2012 people were saying it was crazy that there is no autoupdate of the update server and an Adobe employee responded saying they'd look in to adding it at some point and it's now 2025 and still not implemented!! You'd think with all the bandwidth it would save them they'd spend a bit more time making this work a lot better.

[Fazza]

Is there a command I can run during an SCCM task sequence to initiate RUM on the machine to update it when we've imaged a PC?

[FN-GM]

I am using RUM in InTune with a remediation script. It runs every 4 hours. Works pretty well!