SCCM 2007 : Software Updates Client Agent Settings and Maintenance Windows.

Confusion about Software Updates Client Agent Settings and Maintenance Windows.

Please forgive me if this has been answered earlier. I went thru quiet a few posts here but they have left me more confused...

I need to ensure all "Required" Software Updates are installed on all the servers based on pre-defined Maintenance Windows. I noticed that almost none of the servers install all of the required patches. A few patches are always missed out (not installed) and I'm at a loss as to how to fix this.

I read in posts about Enforce all mandatory deployments which I hope will do exactly that.

My question is "Will checking this option override maintenance windows?" I need to enforce installation of all required patches but only during the defined maintenance window.

December 30th, 2013 4:51pm

My question is "Will checking this option override maintenance windows?" I need to enforce installation of all required patches but only during the defined maintenance window.

No this will NOT install SU during the MW. IT will install them ASAP.

My questions for you is exactly how have our setup your MW? How long are they? What is your countdown time for reboot set to?

Free Windows Admin Tool Kit Click here and download it now
December 30th, 2013 6:15pm

Thanks for the answer Garth!

Our MW is set to a certain number of servers twice a week.

We have one main collection (empty) to which updates are deployed to. Sub collections are created for each MW which contains the list of servers to be patched during that time.

During each month's MW, we modify the MW to set to current date/time to enable SCCM to push updates. We are setting an 8 hour window. No recurrence has been set. In short, each server gets its 8 hour MW each month.

No countdown is set to ensure restarts happen immediately during MW.

December 30th, 2013 6:51pm

No countdown is set to ensure restarts happen immediately during MW.

This is not possible you must have a countdown time, the minimum is 1 minute. The default is 5 minutes but many people will change it.

What do you have under Computer Client Agent Setting on the restart tab?

Free Windows Admin Tool Kit Click here and download it now
December 30th, 2013 8:58pm

The Restart Countdown is 5 minutes

Restart final notification is 1 minute.

January 3rd, 2014 1:09pm

So how to answer this..

In 8 hours with those count down setting you should be able to install all SU that apply. However you should know that until you get caught up it is possible that you apply all required SU and when the PC scan again it will find NEW SU that need to be applied for example Windows 2008 R2 SP1, once you apply that SP and scan again you will find that there are new SU they need to be applied and they will get applied at the NEXT MW, even if there is time left in the current MW.

I find that 3-4 full SU cycles are needed to get caught up. Once you caught up it is easy to deploy the monthly SU in one shot.

Free Windows Admin Tool Kit Click here and download it now
January 3rd, 2014 5:20pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics