WMUG Presents System Center 2012 Configuration Manager Software Updates Management Presented by Robert Marshall MVP ConfigMgr

What is Software Updates Management? Deploy Microsoft and non- Microsoft Patches to your client estate Reduce your Security exposure

Infrastructure requirements for Software Updates Management ConfigMgr Software Updates Role Access to the Internet for Microsoft Updates Windows Update Agent WSUS

Defining a Patching regime for your organisation When to sync with Microsoft Updates? Define when you will patch Define what you will patch Patching out-of-cycle

Software Updates Patch classifications and severity Critical Updates, Definition Updates, Security Updates, Updates, Update Rollups, Feature Packs and Tools

Using the Search facilities in the ConfigMgr Console to refine your selections Create your own searches and save them for re-use

Software Update Groups Contains a list of Software Updates Is essentially an authorization list Used to measure Compliance Used to build a Deployment Package

Deployment Packages Contain the Software updates patch files for Clients to reference Sent to Distribution Points

Automatic Deployment Rules Mostly used for EndPoint Protection Definition file deployment to Clients Useful for automating the monthly patch cycle to Test machines Be aware of the consequences of deploying patches directly to Production Clients

Software Updates Management Reporting SQL Server Reporting Services Multiple categories of Report

Deploying Software Updates Requires a Software Update Group, a Deployment Package, Collections and Clients

Understanding Supercedence and Expired Software Updates

Controlling Software Updates installation behaviour Maintenance Windows Scheduling

Software Updates Deployment Monitoring In-console monitoring Reporting Services Deployment Monitoring Tool

Software Updates logging Server-side logs us/library/hh aspx#BKMK_SUPLog Client-side logs (Client Operations section) us/library/hh aspx#BKMK_ClientOpLo gs Technical Reference for Log Files in ConfigMgr - us/library/hh aspx

Basic troubleshooting steps for Software Updates Device Targeted? Functional Client? Maintenance Window blocking deployment? Scan engine failure … broken WUA?

Extending Patch Management to handle non- Microsoft patches System Center Updates Publisher 2011 Guides Kent Agerlund MVP – Coretech - Justin Chalfant – Patch My PC - MMS 2013 – Managing Third Party Updates with ConfigMgr – Kent Agerlund and Lawrence Garvin

A tour of the Software Updates Windows Management Instrumentation namespace on the client Tool of choice - WBEMTEST Namespace - ROOT\CCM\SOFTWAREUP DATES\UPDATESSTORE Query the CCM_UPDATESTATUS instances

Microsoft Forefront Endpoint Protection 2010 and Software Updates EndPoint Protection Guides From Niall Brady at Windows-Noobs

Thanks for watching Slide deck is available for this session on the WMUG website in the Events section Register at WMUG.CO.UK and automatically receive Event announcements