Hi there, We used to use WSUS and SMS 2003 on separate boxes. When we use the WSUS console, we could easily find out which update still needed when we click on the computer group. Now, we're going to ditch the old servers and setting up a new SCCM 2007, which used together with WSUS on the same box, to manage the software deployment as well as the system updates. Since the WSUS settings are controlled by the SCCM, I never use the WSUS console. Anyway, I've created the appropriate computer collection groups but then how do I find out which update needed for which system/group? Or I still need to use the WSUS console for that? (I'm still trying to figure out how to deploy updates though) Thank you for your advice!

Hi,For patch compliance you will use the ConfigMgr. reports. No need to go into the WSUs console any more. If you look at you reporting site you will a lot of reports in the Software Update - A/B/C/D they contain all the needed information.For a greate introduction to Software Update Management check these posts written by the ConfigMgr team - http://blogs.technet.com/configurationmgr/archive/2009/05/21/examining-some-common-problems-for-software-update-points.aspxKent Agerlund | http://scug.dk/members/Agerlund/default.aspx | The Danish community for System Center products

Just to add what Kent has already state. The computers know what they need. There is no need to create collections with directed patches. You can run a resport that states the X is needed for a certain machine or all machines. In the Software Updates node you can scroll left or right and see if it is required or not required. You can use this information along with the report information to build your update list and deploy your patches. From there once you have deployed your needed patches you can check the patch status to see what machines need it or you may pull the report for a specific machine and see what patches are necessary.http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com

Thanks for the reply guys.I'm still new on this config manager thing so...I thought there's an easier way to check it out.As I mentioned before, like when I'm using the WSUS console and click on one of the workstation, it will display which update already applied, which update still needed, as a link and a nice pie-graph on the same page.@Matthew:So that means, I don't need to worry about deploying updates to computer collection that might not need or supersedees some updates?Ap

Correct, I have a collection with all my workstations and I apply vista, xp , vista 64 patches to it. The machines will scan and know what they need to install. You can Run a report for a single computer (click on a computer from within the other reports) and display a list of patches for the machine. There there is a column for approved and one for installed so you can sort and check to see what a particular machine needs.The nice thing is that you don't have to worry about directing the patches. The comps will keep scanning and trying to install the right patches for their o/s. Nice and simple.http://www.sccm-tools.com http://sms-hints-tricks.blogspot.com

Hi Andrew, As this thread has been quiet for a while, we assume that the issue has been resolved. At this time, we will mark it as "Answered" as the previous steps should be helpful for many similar scenarios. In addition, wed love to hear your feedback about the solution. By sharing your experience you can help other community members facing similar problems. Thanks,Yog Li - MSFT

My apologies for not replying sooner. I've been off work due to medical condition for some time now but I've read the posts and yes, that answer my question. I guess there's no "shortcut" to the report after all. Thanks Kent and Matthew!

Here is a right click tool so you can right click on a computer and see what patches are missing.Create an xml doc and place it in X:\Program Files\Microsoft Configuration Manager\AdminUI\XmlStorage\Extensions\Actions\7ba8bf44-2344-4035-bdb4-16630291dcf6Here is a link to the vbs file needed. http://www.sccm-tools.com/tools/rightclick/Rightclick-webreports.html <ActionDescription Class="Group" DisplayName="My Reports" MnemonicDisplayName="My Reports" Description="Reports" SqmDataPoint="99"> <ActionGroups> <ActionDescription Class="Executable" DisplayName="Client update Report" MnemonicDisplayName="Client update report" Description="Run Compliance 6 - Specific computer report"> <Executable> <FilePath>C:\Program Files\ITS\reports\reports.vbs</FilePath> <Parameters>reportserver 170 MachineName ##SUB:Name##</Parameters> </Executable> </ActionDescription> </ActionGroups> </ActionDescription>