Solved

SCCM 2007 and Software Updates - Multiple Primaries

Posted on 2012-03-14
6
884 Views
Last Modified: 2013-11-21
I have a SCCM 2007 environment with a central site (G00 Site Code), three child primaries (G20, G30, G60), and many secondaries. Each primary has the WSUS console installed and each software update point has WSUS SP1 installed.

Should I be able to create SUP deployments in the central site SCCM console and deploy them to systems under each primary? Or must I create deployments on each primary for the systems with the corresponding site code?
0
Comment
Question by:hdgarmin
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
6 Comments
 
LVL 7

Accepted Solution

by:
George Simos earned 500 total points
ID: 37749138
Yes you should be able to do that down to the hierarchy, the point here is to have this in your mind always:

1) You authorize updates and create deployment packages on your Central/Primary Server,

2) Your clients connect to their MP and look for a WSUS to check against it's updates metadata in order to select which of them are available for them (carefull this is just a check here)

3) After that they send their status back to their MP and it returns them the available update packages which they retrieve from their closest DP.

MP= Management Point
DP= Distribution Point

If your Secondaries are connected with your primaries via fast connections then you should not have to install WSUS and the Software Update Point on them else you should.

Hope these helped you.
0
 

Expert Comment

by:lawilliams29505
ID: 37796715
I myself have a central server and primaries below. I have WSUS installed on each primary server because I have multiple domains and for speed. My Central server is the only WSUS server that can hit the Internet. The below primaries connect to him and download their updates. The clients connect to their relative Primary and pull down their WSUS patches. All updates are approved from one console and Synced to all other primary sites. When setting up a primary server as a SUP you must install WSUS using it's separate IIS site so the ports will be 8530 and 8531. I have not been able to get this to work any other way.
0
 
LVL 7

Expert Comment

by:George Simos
ID: 37799684
@lawilliams29505: Just a correction there, in SCCM we don't use WSUS to download updates, we use it to download the metadata of the updates which are then populated in ConfigMgr's database, the updates are downloaded actually during the deployment package creation (that's why we see the downloading progress bar and wait for them to get downloaded).
The only reason we need WSUS in the child sites is because the clients check their available updates against WSUS.
The updates are distributed to the Distribution Points of each child site (down to the hierarchy) WSUS doesn't have to do anything with this process too :-)

I hope it's more clear now.
0
 
LVL 7

Expert Comment

by:George Simos
ID: 37910157
@hdgarmin: Hi, any news about your question? It seems abandoned :(
0

Featured Post

What Is Transaction Monitoring and who needs it?

Synthetic Transaction Monitoring that you need for the day to day, which ensures your business website keeps running optimally, and that there is no downtime to impact your customer experience.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The question has been asked on multiple occasions as to how best to do printing in a remote desktop or terminal services environment.   It seems that this particular question has plagued several people and most especially as Terminal Services, as…
Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

719 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question