SCCM won't download updates

Hi all! I'm having an issue with our SCCM Current Branch server when it comes to downloading updates. I am a new Network Engineer so any help would be greatly appreciated.

Situation: So I have a software Update Group already created with what updates I want it to download. When I try to download those updates I get the error as seen in the attachment.

So what can I do to help resolve this issue?
Taylor HardyNetwork EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Taylor HardyNetwork EngineerAuthor Commented:
I now have some further information. When viewing the SMSProg logs I'm getting a permission error. So what I've done was gone to the drive that all the software updates get downloaded too and the account that I have for it says it has full Read/Write/Full Permissions for that drive. Yet I'm still getting a permission issue. So what could be the issue?

See the attached picture.
Hayes JupeIT DirectorCommented:
SCCM uses the system account for pretty much everything - have you removed "system" from the permissions structure ?

I also assume the unc you have partially obfuscated is a share - does everyone (or if not, at least system) have read/write to that share ?
Taylor HardyNetwork EngineerAuthor Commented:
HI Hayes, thank you so much for your response.
SCCM I believe shouldn't be using the system account. I'm fairly certain I added my domain credentials for that. How would I go about verifying that my statement is true?

The only thing I obfuscated was my domain login username. But the log just shows the folder path \\sccm\j and then ~*~* but I'm not sure why it's showing that because that isn't the folder path. It literally just goes on the J:\ Drive

I hope this helps! I really appreciate your time!
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

Hayes JupeIT DirectorCommented:
ok, so open services and have a look at the SMS executive service - which account is that running under ?

I would be quite surprised if it wasn't running under local system - which is best practice.

Another SCCM good practice is to use UNC's for everything.

the approach I take is
E:\Psource - shared as PSource$

Then software updates would go under

\\sccm01\psource$\SU.Windows.10 (for example)

if you start using direct paths, such as J: (or other drive letters), especially without a folder, you can expect to run into issues with organization and cleanliness of the environment.
Taylor HardyNetwork EngineerAuthor Commented:
Hello again Hayes, So I opened up services and it is running under Local System

Okay, so I'll go ahead and start making folders per your recommendation.

Once I finish making those folders then I would just assign permissions to those folders and that should help resolve the issue?

And I'm sorry I have one more question for you. How would I go about changing where the updates are saved too after those folders have been created?

Sorry that I'm such a novice but I really do appreciate you helping me!
NEnterprise Systems EngineerCommented:

Not sure if this could be related to your issue or not but there seems to be an issue going around at the moment causing WSUS sync failures - specifically with W10 updates:

We've been affected by this as have others, but not everyone.
Taylor HardyNetwork EngineerAuthor Commented:
Hi N, it doesn't look like this would be my issue because so far what I'm able to find out is it is having a permission issue when it is trying to download the updates to the J drive. I'm still trying to figure out why it's having permission issues. So far I haven't had any luck.
Taylor HardyNetwork EngineerAuthor Commented:
Yeah... I'm still at a loss on this one. I've given every single folder in that J drive along with the J Drive itself permission for full control/read/write access and it's still saying I have a permission issue. I'm out of ideas of what to try. So any suggestions would be helpful.
Taylor HardyNetwork EngineerAuthor Commented:
Day 3 and still the same issue. If any one is able to assist I'd greatly appreciate it.
yo_beeDirector of Information TechnologyCommented:
how is the capacity look?
I have seen limited amount of space cause downloads and DP push to  populate successfully fail.
Taylor HardyNetwork EngineerAuthor Commented:
Creating a new Folder and having all the update packages download there resolved the issue.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
yo_beeDirector of Information TechnologyCommented:
Did this new directory have a new location or was it using the same disk space at the prior update folder.

Does the new directory have the same permission and access rights?
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.