We have recently starting using SCCM to patch workstations however we are noticing strange patching evaluations which is leaving our workstation estate inconsistent and missing lots of patches.

As an example, say we deployed 10 MS patches last month with a deadline deployment.  At the deadline, only 3 patches applied (which didn't require a restart) and the workstations reported back into SCCM as Compliant.  Randomly, 2-3 weeks later, a few of the workstations started installing the remaining 7 patches (which required a restart).  

We are left with a inconsistent estate of patched workstations.

Any ideas what might be causing this? We have all client options for Scans set to every 1 day.

Thanks

Do you have Maintenance Windows (MW) on these computers?

Have you review the SU logs?

Thanks Garth,

We do have Maintenance Windows set up however our Deployments are configured with a Deadline Behavior to allow Software Updates Installations and System Restart (if necessary) outside the maintenance window. 

Is there a specific log I should be checking for this issue?  So far I've checked the following log files on the workstations: WAUHandler.log, UpdateStore.log, Updateshandler.log and UpdatesDeployment.log but not really sure what to look for.  Since the initial installation of 3 patches, In WAUHandler.log each day there is the following

Async Searching of updates using WUA started. Async searching completed. Successfully completed scan.

However when it found the remaining 7 patches, there is the following in WAUHandler.log

Async Searching of updates using WUA started. Async searching completed. Successfully completed scan. Going to Search using WSUS update source.  Synchronous searching of all updates started...  Successfully completed synchronous searching of updates (then it finds the remaining 7 updates). 

Am i missing something and am I looking in the right log files??

Thanks

Can you look at MaintenanceCoordinator.log, ServiceWindowManager.logto make sure not something funky with the maintenance windows.

Hi Frederick,

Thanks for the advice.

on checking the maintenancecoordinator.log file there is a line in the file on the initial day of deployment (3 patches) saying 'Setting Maintenace Mode to FALSE' and again on the day it found the remaining 7 patches.  All the days in between these dates, there is a line saying 'No CCM Identification blob'.  Any ideas what this means?

Nothing strange in servicewindowmanager.log

Thanks

Nothing unusual

22:00 - 05:00 Daily Monday - Friday.  Nothing on Saturday and Sunday.

Thanks