1. Third-Party Patch Management using SCCM 2012 R2 SP1, SCUP 2011, and iExpress Chris Nienaber

2. Contact Information Chris Nienaber Network Analyst – Horizon School Division chris.nienaber@horizonsd.ca 10 years experience in Information Technology Have been working with SCCM & SCUP for the past 5 years Feel free to take a business card at the front

3. What is SCUP? SCUP 2011 is a free updates publishing and authoring application Key Benefits: You can download free catalogs from vendors like Adobe, HP, and Dell You can Author your own updates Versatile detection methods as compared to SCCM Application Deployment Removes the need to build advanced collection queries as this is offloaded to the SCUP updates You can download SCUP 2011 from: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=083f45ca-1ede-4f7a- be7477854c3a9b01&displaylang=en http://www.microsoft.com/downloads/en/details.aspx?FamilyID=083f45ca-1ede-4f7a- be7477854c3a9b01&displaylang=en

4. Installing & Configuring SCUP 2011 with SCCM 2012 R2 SP1 Pre-Requisites: If using SCUP with WSUS 3.0 SP2 download and install the WSUS hotfixes WSUS- KB2530678-x86 or WSUS-KB2530678-x64: https://support.microsoft.com/en-us/kb/2530678 If using SCUP with WSUS 4.1 on Windows Server 2012 or higher be aware of the following limitations: https://blogs.technet.microsoft.com/configmgrteam/2013/12/11/system-center-updates- publisher-2011-support-statement-update/ https://blogs.technet.microsoft.com/configmgrteam/2013/12/11/system-center-updates- publisher-2011-support-statement-update/ In short - ensure that if you are running WSUS on a server 2012 or higher OS that you are publishing from a Windows 8 or higher client or you will receive a version mismatch If using SCUP on Server 2012 and using a self-signed certificate use the following reg hack: http://blogs.technet.com/b/wsus/archive/2013/08/15/wsus-no-longer-issues-self-signed- certificates.aspx http://blogs.technet.com/b/wsus/archive/2013/08/15/wsus-no-longer-issues-self-signed- certificates.aspx

5. Installing & Configuring SCUP 2011 with SCCM 2012 R2 SP1 Configuration Guide https://onedrive.live.com/redir?resid=65A7D63FE13FA285!6 8161&authkey=!AMCBn6_IM49Ule0&ithint=file%2cpdf

6. What is iExpress? IExpress is a Microsoft utility bundled with various editions of Windows operating systems (32-bit and 64-bit): Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows 8, Windows 10 and Windows Server 2012. It was also included as part of all Internet Explorer Administration Kit releases 4, 5 and 6, and was part of all installations of Internet Explorer 6. IEXPRESS.EXE is used to create a single self-extracting package from a set of files. Such packages can be used to install applications, executables, drivers, other system components, or setup bootstrappers. It creates a self-extracting executable (.EXE) or a compressed Cabinet (.CAB) file using either the provided front end interface (IExpress Wizard), or a custom Self Extraction Directive (SED) file.

7. Update Deployment Demo (Java) (iExpress Demo, Packaging Update & Deploying)

8. SCUP Resources Jason Lewis Blog: https://blogs.technet.microsoft.com/jasonlewis/ Jason Lewis Scup Video Guides: https://www.bing.com/videos/search?q=jason+lewis+scup+videos&qpvt=jason+lewis+s cup+videos&FORM=VDRE https://www.bing.com/videos/search?q=jason+lewis+scup+videos&qpvt=jason+lewis+s cup+videos&FORM=VDRE iExpress package creation walkthrough https://www.youtube.com/watch?v=k976yEXX11k Third Party Catalog Solutions: Solarwinds Patch Manager $10,000 for 3500 nodes, lifetime subscription and support Shavlik Patch Manager $16,000 for 3500 nodes, per year annual subscription

9. Q & A