I am pretty new to SCCM, but I do have a single server (SCCM 2012 SP1 CU4) setup for using Endpoint Protection, Windows Updates, and PXE.

Here is a little background:

We have two separate domains in our environment.  Domain A is the local domain that the SCCM server is in.  It is handling Endpoint Protection, Windows Updates, and PXE.  Domain B is kind of an "after thought" because it was not originally going to be used by the SCCM server.  However, I was asked if Endpoint Protection could be deployed to Domain B.  I have a separate Boundary and Boundary Group set up for each domain.

Here is my question:

I go to Administration --> Hierarchy Configuration --> Boundary Groups.  I right-click on Domain B's Boundary Group and choose Properties.  Then I click on the References tab.  In the Content Location section, is this where Windows Updates could be handed out?  Are Windows Updates considered "content?"

I am asking this because we have separate WSUS servers at each domain.  However, when I started setting up Domain A I saw a bunch of errors in the Windows Update logs of SCCM (WCM.log, WSUSCtrl.log, and wsyncmgr.log).  I got past all of that by using SCCM for Windows Updates instead of using our WSUS server for Domain A. 

In the process of setting up Domain B, I have not seen any errors in those same log files.  I am wondering if that is because I do not have a "Site system server" specified in the References tab of Domain B's boundary group.  Would Windows Updates be handled by the Site System Server listed under the Content Location section of the Boundary Group?

Whew....I hope that all made sense.

Thanks in advance!!!

Updates are considered as content if you are talking about the SUP. WSUS (SUP) is only used for scanning; the binaries will be downloaded

Hi,

If it is WSUS integrated with ConfigMgr = SUP as Torsten wrote, the client will download the updates from the closest DP and not the WSUS Server. You mean you will not have site system at all in that BOundary group? If the files are not on a DP within the boundary group you can have it it fallback to a central DP if that helps.

Regards,
Jrgen

Updates are considered as content if you are talking about the SUP. WSUS (SUP) is only used for scanning; the binaries will be downloaded from

Create a separate set of client settings for those workstations and set the option "enable Software Updates on clients" to no.

Oh...perfect.  Thanks!!

• Marked as answer by jester8053 21 hours 20 minutes ago
• Unmarked as answer by jester8053 21 hours 20 minutes ago
• Edited by jester8053 21 hours 19 minutes ago Edit