SCCM WSUS: howto automatically update (no manual actions)

Hi,

I have WSUS for SCCM 2007 in place. Now I have these update lists but would like SCCM to automatically download latest patches (Windows 2008 R2/7/W2003) and offer them to the servers/clients. Then I would like to have groups to which it should install automatically and groups to which I have the option to install when logged on.

Goal is to automatically update all my lab-servers with latest updates continuously. Machines which are not used/powered on often should have the latest updates offered.

Note: I just want to have SCCM scan the servers for critical updates needed and apply them automatically. Just I could do with WSUS.

Please advise howto do this.
J.
janhoedtAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
David Johnson, CD, MVPOwnerCommented:
it is exactly the same as with wsus. sccm is just a centralized location for managing your network.  REMEMBER updates are a pull process not a push process
0
 
janhoedtAuthor Commented:
Ok, but my update lists are not updated automatically. So how do I get all latest updates being done automatically to my clients?
0
 
janhoedtAuthor Commented:
Note: I might not have understood the concept of WSUS in SCCM. I create an update list, a deployment template and distirbute that in a deployment package, right? Well, if I try to add another deployment package, it says:
sccm
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
David Johnson, CD, MVPOwnerCommented:
All clients should have automatic updates turned on.. Perhaps in 'download but don't install' and scheduled sometime in the workday..  3AM isn't really useful if the machines are turned off.  They will periodically poll the wsus server and if any updates are available download them.
0
 
janhoedtAuthor Commented:
Ok, but this has nothing to do with the screenshot I posted.
0
 
merowingerCommented:
in SCCM 2012 this is no problem as there are automatic approval rules which can point to specific collections, but in SCCM 2007 you've to configure it within WSUS but that's no nice way...
0
 
janhoedtAuthor Commented:
Ok, how do I do this within WSUS then?
0
 
David Johnson, CD, MVPOwnerCommented:
group policy
group policy settings
for the different groups you will enable client side targeting.
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
janhoedtAuthor Commented:
Please explain what it does.
0
 
David Johnson, CD, MVPOwnerCommented:
You are trying to add a group windows server 2008R2 Servers in SCCM instead in WSUS create a group "Windows Server 2008R2 Servers" bit long winded as "Servers 2008R2" would be sufficient and add the computers from the unassigned computers to this group. This way when you approve updates for this group. they will grab these updates and not from the 'unassigned computers' or a client group

my WSUS groups
You see I have several groups here
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.