SCCM R2 Automatic updates not allowed.

Posted on 2011-10-06
Last Modified: 2012-08-13
Hello All,

We have an SCCM 2007 environment with 1 primary server and 11 secondary servers.
We also use MS Forefront Endpoint Protection 2010 for all our workstations and servers.

The issue I have is that SCCM 2007 does not support automatic approvals or downloads for updates or definitions like the ones for Forefront clients.

My question is this:
Is it possible for me to use the WSUS database installed for SCCM 2007 to allow the definitions and updates for Forefront Clients?

I'm hoping that I don't have to install another instance of WSUS, and that I can use the existing WSUS to setup automatic approvals and installations of all the Forefront definitions and updates.

Question by:Ampletrix
    LVL 23

    Expert Comment

    by:Nagendra Pratap Singh
    Bad news for you.

    This is from Wally Mead, Manager for SCCM

    Wally MSFT
    Here's the answer, straight from the dev lead and program manager:

    SCCM 2007 doesn’t support deploying definition updates. Forefront is the right solution for deploying definition updates but right now they are targeting market with 5000-10000 clients.
    They should be able to use WSUS to deploy the Forefront definitions.
    LVL 31

    Expert Comment


    Author Comment

    Hello guys,

    Thanks for the replies.

    I knew that I couldn't auto approve updates in SCCM for Forefront, and that I can do it from WSUS.
    My question is this:
    Seeing that I have WSUS installed and NOT configured for SCCM, can I configure the same instance of WSUS as well?
    Is it possible to use WSUS for Forefront updates and at the same time still use SCCM for all the remainder updates?

    LVL 23

    Assisted Solution

    by:Nagendra Pratap Singh

    In fact WSUS does not care much about who is pulling updates from it.

    I once pulled updates from a WSUS installed on an older SCCM server (Long story) because It would have taken me days to get all updates from the net.

    Author Comment

    That's exactly what I'm looking for.

    Thanks npsingh123!
    Can you remember if you had to do anything to SCCM or the WSUS to allow both to use the same instance?

    LVL 31

    Accepted Solution

    Check out the link i've posted.

    Only the Forefront Endpoint Protection Definition Updates are approved directly, all other updates are deployed via SCCM. The same WSUS as SCCM takes can be used. Just follow the guide!

    Featured Post

    Want to promote your upcoming event?

    Is your company attending an event or exhibiting at a trade show soon? Are you speaking at a conference? Spread the word by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

    Join & Write a Comment

    I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
    This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now