I just installed SCCM about a week and a half ago. At first I installed SCCM just for Endpoint Protection, but then I realized you can use it for update deployments. Eventually I want to go on to moving from my WDS to OS deployment through SCCM too, but for now I'm stuck on updates.
So here's what I'm trying to do:
Deploy my WSUS Certificate, Update Java, Update Adobe reader, Update Flash.
On my Windows 7 computers everything is working. I look in my software center and everything is installing correctly. I did notice that java doesn't install over itself (I don't mean whole versions, I mean V7U11 not installing over V7U7.... kinda weird) but that's besides the point. Adobe installs right.
I did enable intranet installations though GPO, otherwise this wouldn't work on my W7 computers. I run a gpresult on the XP computers and I can see the policies are being applied. Boundaries and boundary groups are set correctly - otherwise W7 wouldn't work either.
Here's some background info: Right now I'm working with one domain before I branch off. WSUS wasn't working at first so I made a boundary for my IP scope, "Default-First-Site-Name" and one for my domain. I realize that I only need the IP setting, but I don't know if deleting the other two will mess something up. I'm not prepared to test that now. I have one boundary group encompassing all three boundaries.
I would also like to note - I have five domains in my district. I will eventually branch out to all five - for this reason I have created folders for each domain. In my All Systems I only have one domain, though, because I've only discovered my one domain thus far. It will not be this way forever though. Once I discover my other domains I will have thousands of computers. For this reason I made a group in my domain's folder called All Comptuers. The limiting collection is All Devices and it simply queries my domain OUs (My All Computers OU and the "Computers" OU that computers default to in AD).
This Collection doesn't recognize any of my computers. None. I've searched for days on this (while doing everything else) and my queries are right. Boundaries are right... I have three more collections that do work correctly when quering an AD daughter OU of "All Computers" limiting it to All Devices. This may have something to do with it: When I create a query for OU containers I can only see "All Computers" and sub OUs of "All Computers". I should be able to see all of the sub OUs of my domain right? That's how it was at first.. I don't know how it changed. So I had to choose "domain\All Computers" then I had to write in "domain\Computers".
These are the small problems I'm having. I don't mean to have all of this done for me as I'm sure I'll figure it out, but it wouldn't be fair not to mention these as they may be the source of my more immediate update problem.
Thanks for your help!!
To reiterate my problems:
WSUS Certificate is a batch file - Working on W7, Not working on XP Software Center Error: 0x1(1)
Java is a batch file - Working on W7, Haven't deployed to XP (Will by tomorrow to see if it works)
Adobe is NOT a batch file It's a premade library in SCUP that I'm deploying through SCCM. - Working on W7, Not working on XP Software Center Error: The software change returned error code 0x800B0109(-2146762487).
While doing some reading I found that UNC deployments are not ideal:
(Can't post the link)
My WSUS Certificate batch deployment is UNC.
certutil -addstore Root \\"server"\sources\cert\WSUS.cer certutil -addstore TrustedPublisher \\"server"\sources\cert\WSUS.cer
where "server: is my server name. It worked on my W7 machines. Is UNC the problem for my XP machines? Onces the WSUS certificate is installed I'm willing to bet Adobe will work... I do have the box checked (that's default) that says download then install.
I'll be waiting for an answer :)
- Edited by Quincy R Monday, January 14, 2013 9:40 PM