software updates

SCCM – Updated E-book SCCM Administration v3

Hi All, my updated SCCM e-book has finally been released. It took some time to write up and test. With 130 pages divided in 37 chapters, you’ll find lots of good info about starting with SCCM. And it is free… In this version, I removed Linux related topics, Updated Windows 10 to 1709, added sections for Cloud Management Gateway (CMG), Windows 10 Express updates, SCCM Data warehouse, Office 365 Installer, Windows 10 Update Readiness, Pending Reboot, updated some other section for SCCM 1710 and updated/added some powershell scripts To download, click here. let me know if you have any feedback

Awesome news – Book & Software

Hi All, i have some awesome news to share with you. 1st news, yesterday my new SCCM e-book was finally released. It took some time to write up and test. With 197 pages divided in 33 chapters, you’ll find lots of good info. The book has also over 160 powershell scripts, so you can automate almost (if not all) SCCM tasks you’ll be performing on day to day basic. And on top of that, it is free. To download, access https://goo.gl/CmRTcm, fill up the form and download the PDF. 2nd news, yesterday we also released a new version of our Dashboard software, now called DataExplorer with modules for SCCM, SCSM, Hyper-V, Active Directory and Office365. To download a trial version of the software, access https://goo.gl/O0foHg, fill up the form and download the Setup file.

SCCM-Software Update Compliance taking long time

Hi All, have you ever wonder why the Software Update Compliance takes long time to report the correct date? often that I get this question from a customer that wants to know what the status just after a software update deployment, but when I mean just after, I mean just few minutes. there are lots of things that could cause the status not being showing correctly, like network, etc. that is outside ConfigMgr, but in this post, lets talk about the main one, state messages. When using SCCM 2012/2012 R2, the default detailed level setting when deployment a software update group is to report only success and errors messages. this is quite ok for most environments where you go to the deployment node and check things from there, but you’ll not get the compliance for each update. there are 3 options: all messages, only errors messages and the default one…

SCCM-Windows Update 6.2.x on Windows 10?

Hi All, I have been reviewing a report I did for a customer where all Windows 10 machines were reporting Windows Update Agent 6.2.x. what caused my customer to send few people on few windows 10 machines and try to troubleshoot windows update issues where it did not exist. of course, after couple of hours/day, they realise this was a data issue instead of their environment issue. When I started to review, I looked at my lab and I had the same. Executing a query on fn_rbac_UpdateScanStatus, I saw all my windows 10 machines also reporting Windows Update Agent 6.2.x So something was wrong. but why? 1st step was to check if the files on the client where the correct version. if you want to know where I discovered which file to look, click here. As you can see, the file was with the windows 10 version…so I checked Powershell…

SCCM 2012-SW Update Group for Reporting

Hi All, often, when i go to customers, i need to create and update a software update group for reporting so they can get a easy way to know if they are compliance with the deployed update groups… ps. you ay need to change the CategoryInstance_UniqueID to add the products and classifications you have in your environment.

 

SCCM 2012 – Powershell for Creating iOS Store Apps

Hi All, Have you ever need an application/dt based on an iTunes link? if yes, you know how time consuming it is and the experience is not great. Based on this, i’ve created this powershell that will, from a itunes link, identify the name of the application, publisher, category and create a new application (if needed) as well as a new deployment type called iOS, also if needed. to use this powershell, you need to pass the sdkserver and the sitecode as well as a text file with the iTunes links (1 per line) the text file should look like the following: https://itunes.apple.com/gb/app/microsoft-word/id586447913?mt=8 https://itunes.apple.com/gb/app/microsoft-powerpoint/id586449534?mt=8 https://itunes.apple.com/gb/app/microsoft-excel/id586683407?mt=8 the command line would look like: .\ImportiTunesApplication.ps1 -sdkserver “SRV0007” -sitecode “CLC” -filename “c:\temp\ituneslist.txt” at the end, you’ll see all apps being created

 

SCCM 2012 – Powershell for Creating baseline for SW Upd

Hi All, how often you arrive at a customer site and need to create the baseline for software update and distribute it to a DP group? I see this need often and when i create baseline, i create 1 per product, so, if you have 3 products, 3 baselines, but if you have over 10+ products? the work that need to be done is time consuming ins’t it? based on this, i’ve created the bellow powershell. it basically, will connect to your site, select all products you have selected on the software update and will create a software update group for each product. it will also download the files from the internet and create a deployment package (you’ll need to specify the folder where the files are going to be copied to) and distribute the content to a DP Group array. if you’re small company, maybe you have 1 or…

Software Update – kb2920189 & VM Secure boot

Hi All, Yesterday i was updating my lab and i noticed that every single vm was failing to install kb2920189. All my vm’s are running windows server 2012 R2 under a WS2012 R2 host, it means i created a 2nd generation of VM’s and the Secure boot was enabled. Looking at the logs, i found the error 0x800f0922 and if you look at the internet, there are lots of things about this error that was not relevant to the issue here, until i found a forum post that helped me. basically, if you’re having this problem with your 2nd generation machines with secure boot enabled, perform the following tasks: 1- shutdown your VM 2- Edit the VM settings and under Firmware, disable the Enable Secure boot 3- Bring the VM up and install the hotfix 4- Shutdown the VM again 5- Edit the VM settings and under Firmware, Enable the…

SCCM 2012 – SUP – Error: There was an error downloading the software update. (12152)

Hi All, recently i was at a customer site installing SCCM 2012 R2 and i had an issue downloading some updates… The steps were simple. as it was the 1st time, i’ve created an Software Update Group with all Windows 7 updates already released and tried to download it to a deployment package… The wizard was telling me that some updates failed to download with error: There was an error downloading the software update. (12152) and of course, a long list of updates where bellow it. the 1st i thought it was internet/proxy problem, however, there was no proxy involved and i could navigate to the internet without any problem… looking at the patchdownloader.log (it can be under %temp%, C:\Users\\AppData\Local\Temp or \Logs) i saw the following Checking machine config Software Updates Patch Downloader 19/03/2014 09:03:23 5472 (0x1560) Cert revocation check is disabled so cert revocation list will not be checked….

SCCM 2012 – Software Updates

Hi All, Today I’m going to talk a bit aobut software updates. As you may be aware, softwre update is a “simple” task however, the process behind the software update can be a bit complex. And the reason is simple, what happen if I do this? Well…i don’t want this post to be dealt as “best practices” but a guidance on how to do software update and the reason is simple, many people know how to do, but always want a bit more guidance on what would be better….and remember…not best practices. I always refuse to talk about best practices because it always depends. Let’s imagine the scenario where you have a remote site with 3k users. Should you put a local DP there? maybe a secondary site? Let’s assume that as best practices, you would add a distribution point, but on this scenario, every single server should only be…