How to use SCCM Delivery Optimization

Jonathan LefebvreSCCM5 Comments

SCCM Delivery Optimization

The amount of data that transfers daily on a corporate network is quite important. Once a month, Windows Update has quite an impact on that amount. SCCM along Delivery Optimization can help better manage that crazy amount of GB or even TB of content required to patch all computers. In an earlier post, we covered the topic to use with Intune and Windows Update for business In this post, we will detail how to use SCCM Delivery Optimization to deliver Windows Updates. Requirements Clients must be running Windows 10 ConfigMgr 1910 or higher to get all Network ports 7680 inbound to allow peers 80 to allow computer do download updates from Windows Update For more details, see Microsoft docs SCCM Delivery Optimization Using Delivery Optimization along ConfigMgr can be useful for the following reasons : Avoid hosting GBs of updates on-prem across many different distribution points/host/data center to support all … Read More

SCCM Software Update Scan Error 0x80240fff on Windows 10 Clients

Benoit LecoursSCCM11 Comments

We encounter an interesting issue at a client today. All Windows 10 1511 clients were failing to install a cumulative update and send their Software Update scan status to the SCCM Software Update Point. We were trying to apply the latest Windows 10 1511 Cumulative Update KB4019473 to ensure protection against WannaCry outbreak. SCCM Software Update Scan Error 0x80240fff Symptoms We started by making some verifications: Software Update Point was healthy Software Updates Group were created with the needed update and deployed to the client collection A required schedule was set on the deployment Clients were pointing to the right Software Update Point Client needed this update and was not previously installed In the SCCM Console, Software Library \ Software Updates \ All Software Updates, no devices were requesting this update Troubleshooting Since everything point to a client error we check the client logs: The UpdateHandler.log (C:\Windows\CCM\Logs) shows repeated errors : Update scan … Read More

How to use SCCM to add On-Demand Hotfix in WSUS

Benoit LecoursSCCM11 Comments

For this post, we will be looking into how to use SCCM to add Microsoft Update Catalog into WSUS Server. Have you ever ran into a software update that wasn’t available in WSUS, but lo and behold, a quick internet search and you are able to manually download it via the Microsoft Update Catalog? I have. Way too often for my own liking. I published a post last week entitled How to add Latest Windows 7 Convenience Update in a SCCM Image. One reader, Dave, had a very good proposition that inspired the idea of doing this post and show you an easy way to add such updates in your WSUS database. The whole process is quite easy and pretty straightforward. Importing the update in WSUS So, for my last article, I was using KB3125574. In the spirit of continuity, let’s keep the ball rolling with that update. I will inject … Read More

SCCM Express Installation Files for Windows 10 Updates

Jonathan LefebvreSCCM, WINDOWS 1017 Comments

One of SCCM Current Branch 1702 new feature is to support Express installation files for Windows 10 Cumulative Updates. This new features will enable a Windows 10 client to download only differential files from the previous month Cumulative Update. This should limit the size of Windows 10 Cumulative Updates as they tend to get bigger from months to months. In this post, we will cover how to configure SCCM and Windows 10 in order to benefit from express installation files. Prerequisites for SCCM Express Installation Files SCCM Current Branch 1702 or higher Windows 10 Anniversary Update 1607 with April 2017 Cumulative Update which contains the needed Windows Update Agent …or Windows 10 Creators Update 1702 or higher [su_box title=”Note” style=”glass” title_color=”#F0F0F0″] This feature is also supported with Windows Update, WSUS and Windows Update for Business. [/su_box] Enable Express Installation Files in SCCM New settings for server and client are needed in order to manage … Read More

SCCM Software Update Management Guide

Benoit LecoursSCCM, Software Updates27 Comments

SCCM Software Update Management Guide

Software Update management is not the simplest SCCM task. Over the years, we trained many SCCM administrators using a simple approach and deployment strategy. We finally decided to create this complete SCCM Software Update Management Guide. This guide is a best-practice guide on how to plan, configure, manage and deploy software updates with SCCM. This guide aims to help SCCM administrators understand the basic concept of each part of the patch management process. This guide does not explain how to setup your Software Update Point. There are other ways of doing software update management in SCCM, this document describes a typical case that can be used in any organization as a good starting point. It’s impossible to cover every organization’s needs and requirements in a single guide. SCCM Software Update Management Guide The guide will help you achieve these tasks : Guide you toward a good deployment strategy. When and … Read More

SCCM Software Update Dashboard Overview

Benoit LecoursSCCM, Software Updates4 Comments

Starting in SCCM 1610, you can use the new Software Updates Dashboard to view the compliance status of devices in your organization and analyze devices that are at risk. This is the third dashboard since the Current Branch release which is a great effort from the product group to give better visibility on the data gathered by your Configuration Manager clients. We already made an overview of the Windows 10 Servicing dashboard and the Office 365 Management dashboard will also be a topic in a future post. SCCM Software Updates Dashboard Overview To open the dashboard : Open the SCCM console Go to Monitoring / Security / Software Updates Dashboard The dashboard is divided in 5 sections : Devices Compliance Status Missing Updates by Category Critical Alerts Last Successful Synchronization Time Devices Missing Updates Devices Compliance Status Gives a number of devices the are compliant and non-compliant based on the Compliance Status Filters options using the 3 … Read More

Managing Office 365 Updates with SCCM

Jonathan LefebvreOFFICE, SCCM59 Comments

SCCM Office 365 updates management is finally integrated to the standard software update process (since the release of SCCM 1602). Prior to this release it was announced as a new features, but it was not completely managed. It was necessary to add Office 365 updates to WSUS manually in order to manage them trough SCCM software update afterward. It’s now manageable natively with the release of SCCM 1602. The integration of Office 365 Updates to SCCM will ease overall management of updates with these key features : Centralized management Standard Software Update Ability to use Automatic Deployment Rules Easier distribution to branch offices with Software Update packages Applications can run while updating Before this integration, Office 365 Updates needed to : Manually downloaded Manually distributed or to create a package than distribution on Distribution Point Application need to be shut down before the update This post will explain how to natively manage Office 365 desktop client … Read More

Step-by-Step SCCM Installation and Configuration Guide

Benoit LecoursSCCM46 Comments

The new version of SCCM is out ! You may know this version as SCCM Vnext, SCCM 2016 or SCCM 1511. The product group explained on their blog that the new version will be simply called SCCM Current Branch. This blog post is a complete Step-by-step SCCM Installation Guide. SCCM installation has never been an easy process and the product itself can be complex for inexperienced administrators. With these blog posts, our goal is to bring it a bit further, explaining concepts and best practice rather than just guide the user through the installation process. If you’re not familiar with SCCM 1511 Features, you can visit this Technet article which covers it all. If you’re familiar with SCCM 2012 and plans to migrate, read our blog post about What’s New in SCCM 1511 and stop reading this guide. You do not need to do a complete installation if you’re already running SCCM 2012. See our blog post on how … Read More

Managing Windows 10 with SCCM 2012

Benoit LecoursSCCM, WINDOWS 1022 Comments

Since Windows 10 is out, there’s been a ton of information coming out from the SCCM product group. Many people gets confused at what’s needed for managing Windows 10 with SCCM 2012. The goal of this post is to centralize all those information so you can reach out when your organisation will be ready for managing Windows 10 with SCCM 2012. [Updated 12/21/2015] – For complete Windows 10 support, upgrade to SCCM 1511 or perform a complete SCCM 1511 installation Requirement for Managing Windows 10 with SCCM 2012 Before you can manage and deploy Windows 10 in your organisation, you need to update your SCCM infrastructure. Your site servers needs to be updated to SCCM 2012 R2 SP1 or SCCM 2012 SP2. Refer to our installation guide if it’s not the case. You need to apply R2 SP1 Cumulative Update 1. Refer to our installation guide if it’s not the case. You need to update your boot images to Win PE version 10. Refer to the Deployment section of … Read More

Managing Windows 10 Endpoint Protection with SCCM 2012

Benoit LecoursSCCM, SCEP, WINDOWS 1013 Comments

Windows 10 is out since July 29th, now you want to manage Windows 10 Endpoint Protection with SCCM 2012. You have probably noticed that Windows 10 comes natively with Windows Defender. Instead of Endpoint Protection, it is now the default anti-malware managed by SCCM 2012. Actually, the Endpoint Protection agent is installed locally in Programs & Features but it’s using the Windows Defender UI with a thin layer of Endpoint Protection to manage policies and malware definitions. If you have already deployed Windows 10 in your environment, you might have encountered an issue where your Endpoint Protection policies are applied but the malware definitions are not updated. Some have found a way to work around this problem by extracting the Endpoint Protection installer and make Endpoint Protection malware definitions automatically update. Unfortunately, this TechNet article is the only official documentation but it’s mentioning only Windows 10 Technical Preview, no word about Windows 10 RTM. Might only be a matter of updating their documentation. For … Read More