• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1714
  • Last Modified:

SCCM WSUS: howto automatically update (no manual actions)

Hi,

I have WSUS for SCCM 2007 in place. Now I have these update lists but would like SCCM to automatically download latest patches (Windows 2008 R2/7/W2003) and offer them to the servers/clients. Then I would like to have groups to which it should install automatically and groups to which I have the option to install when logged on.

Goal is to automatically update all my lab-servers with latest updates continuously. Machines which are not used/powered on often should have the latest updates offered.

Note: I just want to have SCCM scan the servers for critical updates needed and apply them automatically. Just I could do with WSUS.

Please advise howto do this.
J.
0
janhoedt
Asked:
janhoedt
  • 5
  • 4
2 Solutions
 
David Johnson, CD, MVPOwnerCommented:
it is exactly the same as with wsus. sccm is just a centralized location for managing your network.  REMEMBER updates are a pull process not a push process
0
 
janhoedtAuthor Commented:
Ok, but my update lists are not updated automatically. So how do I get all latest updates being done automatically to my clients?
0
 
janhoedtAuthor Commented:
Note: I might not have understood the concept of WSUS in SCCM. I create an update list, a deployment template and distirbute that in a deployment package, right? Well, if I try to add another deployment package, it says:
sccm
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
David Johnson, CD, MVPOwnerCommented:
All clients should have automatic updates turned on.. Perhaps in 'download but don't install' and scheduled sometime in the workday..  3AM isn't really useful if the machines are turned off.  They will periodically poll the wsus server and if any updates are available download them.
0
 
janhoedtAuthor Commented:
Ok, but this has nothing to do with the screenshot I posted.
0
 
merowingerCommented:
in SCCM 2012 this is no problem as there are automatic approval rules which can point to specific collections, but in SCCM 2007 you've to configure it within WSUS but that's no nice way...
0
 
janhoedtAuthor Commented:
Ok, how do I do this within WSUS then?
0
 
David Johnson, CD, MVPOwnerCommented:
group policy
group policy settings
for the different groups you will enable client side targeting.
0
 
janhoedtAuthor Commented:
Please explain what it does.
0
 
David Johnson, CD, MVPOwnerCommented:
You are trying to add a group windows server 2008R2 Servers in SCCM instead in WSUS create a group "Windows Server 2008R2 Servers" bit long winded as "Servers 2008R2" would be sufficient and add the computers from the unassigned computers to this group. This way when you approve updates for this group. they will grab these updates and not from the 'unassigned computers' or a client group

my WSUS groups
You see I have several groups here
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now