Solved

Deploying Windows Server updates on few select Windows Server in OU in SCCM 2007 R3

Posted on 2014-10-13
5
464 Views
Last Modified: 2014-10-30
Hi Folks,

Assuming that the existing SCCM 2007 R3 infrastructure has already been implemented,
Can anyone here please share some instructions and steps that I need to follow to safely and successfully deploy Windows Update for few selected Windows Server OS within specific OU only not all ?

Because I need to perform updates on different time frame for each OU:

Test and Development Windows Server group WIndows Update deployment and reboot maintenance period Saturday 8 AM - 1 PM only.

Production Windows Server group WIndows Update deployment and reboot maintenance period Sunday 8 AM - 8 PM only.

How and where to configure that on the SCCM Console ?

Thanks.
0
Comment
  • 3
  • 2
5 Comments
 
LVL 13

Expert Comment

by:Abduljalil Abolzahab
Comment Utility
Hi,
You can create collections on SCCM based on Servers OU then implement updates on the collections and regarding time of deployment you have two methods: Configure Maintenance Window on server collection or configure deployment time by group policy.
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
Comment Utility
Hi man,

I'd like to know what are the difference between those two ?

Configure Maintenance Window on server collection
Configure deployment time by group policy
0
 
LVL 13

Accepted Solution

by:
Abduljalil Abolzahab earned 500 total points
Comment Utility
Maintenance Window provide administrators with a way to define a period of time that limits when changes can be made on the systems that are members of a collection.
More information:
http://technet.microsoft.com/en-us/library/bb694295.aspx

Group Policy Settings: You can Enabled and select one of the following options:

◦ Notify for download and notify for install. This option notifies a logged-on administrative user prior to the download and prior to the installation of the updates.

◦ Auto download and notify for install. This option automatically begins downloading updates and then notifies a logged-on administrative user prior to installing the updates.

◦ Auto download and schedule the install. If Automatic Updates is configured to perform a scheduled installation, you must also set the day and time for the recurring scheduled installation.

◦ Allow local admin to choose setting. With this option, the local administrators are allowed to use Automatic Updates in Control Panel to select a configuration option of their choice. For example, they can choose their own scheduled installation time. Local administrators are not allowed to disable Automatic Updates.

But even if you want to use group policy I recommend to configure Maintenance Windows to make sure that updates not installed during working hours.
0
 
LVL 7

Author Comment

by:Senior IT System Engineer
Comment Utility
Thanks for the clarification Abdul.

So in this case which option should I be paying extra attention to avoid SCCM deploying updates in the wrong time frame and rebooting the server immediately ?
0
 
LVL 7

Author Closing Comment

by:Senior IT System Engineer
Comment Utility
Thanks!
0

Featured Post

Are your corporate email signatures appalling?

Is it scary how unprofessional your email signatures look? Do users create their own terrible designs and give themselves stupid job titles? You can make this a lot easier for yourself by choosing an email signature management solution from Exclaimer today.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
EX2013 problem with AD 13 45
Requesting private key file from web certificate 4 15
lync 2013 7 29
ADFS 3.0 and UPN Problem 6 14
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
Experts-Exchange users below are the steps you can follow to upgrade your Lync server to latest CU's or cumulative updates. Note: Perform it during non-production hours.   Step 1: Backup your lync and SQL server database. Follow below article: h…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now