Basic question about Deploying Critical Updates SCCM versus WSUS

Hello,

So I have setup SCCM 2012 and installed WSUS on the same Windows 2012 server, I have a basic question about how the updates get deployed.  I need to deploy critical updates on some servers.  It looks like that is accomplished through SCCM and I found some step-by-step instructions on how to do that.  Does WSUS just serve as a repository and synchs the updates with SCCM?  It appears that the deployments get done with SCCM -- is that correct?  But it also looks like software can get deployed separately with WSUS.  Can you give me a scenario on what actions that would need to be performed in WSUS?   Please excuse my ignorance I am a newbie and am trying to quickly come up to speed and have a lot more to read.  Thanks!  

February 26th, 2015 9:05am

If you have ConfigMan, then you should update from that point.  The WSUS role gets installed, your top level site server keeps the catalog in sync, updates are distributed to distribution points, and deployments install them.  That's in a very small nutshell.  Unfortunately, it is a very in-depth topic and needs a bit of planning/strategy.  I suggest you start here https://technet.microsoft.com/en-us/library/gg682168.aspx
Free Windows Admin Tool Kit Click here and download it now
February 26th, 2015 9:09am

A few points to add to Jacob's summary:

- WSUS is used by ConfigMgr and ConfigMgr clients only to download the update catalog which is synced to ConfigMgr and made available to clients. EULAs are also still downloaded by WSUS and accessed by clients directly from the WSUS server but these are minor parts of the process.

- You should in general never perform any administration in WSUS once it is integrated into ConfigMgr. All necessary administrative actions are performed within ConfigMgr. In fact, unless something goes wrong, you can more or less forget that WSUS is even there.

- Update binaries are handled directly by ConfigMgr with no involvement from WSUS.

To answer the last question directly, "Can you give me a scenario on what actions that would need to be performed in WSUS?" On a day to day basis, never.

February 26th, 2015 9:52am

Thank you both for your feedback -- this helps me a lot, and I really appreciate the time you took to answer my question.  I will check out your link next Jacob.

Reezie

Free Windows Admin Tool Kit Click here and download it now
February 26th, 2015 10:25am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics