Now that we have created an Automatic Deployment Rule and so deploy an update package, I will do the same thing manually. In this example I will create a deployment package for System Center Operation Manager 2012R2 with February 2014 updates. Steps to make and deploy an update package are:

1. Filter with some criteria updates
2. Select filtered updates and create a Software Update Group
3. Deploy this Software Update Group (and so on same wizard create deployment package)

Filter updates

On this screen, click on Add Criteria and choose relevant criteria. In my case I select Product and Date Released or Revised.

As below screenshot, I select System Center 2012 R2 – Operation Manager product and updates released last month.

Create software update group

Once your updates are filtered, select and right click on them. Click on Create Software Update Group.

On the next screen, type a name and a description for the Software Update Group.

Open Software Update Groups menu. The previous Software Update Groups is here. Note that those are created by Automatic Deployment Rule are also here.

Create a deployment package to deploy Updates

Right click on your Software Update Group and select deploy.

Once Deploy Software Updates wizard is opened, you can fill in the fields. Note that all settings are the same as those of the Automatic Deployment Rule.

On Deployment Settings screen, choose the type of deployment (Required or Available) and the logs detail level.

On scheduling screen, set the software available time and the deadline. I set my deadline 7 days after that the software is available.

On User Experience screen, set the client behavior about notification and deadline. On the below example, when deadline is reached, updates are installed but the server is not restarted automatically.

On Alerts screen, specify if you want to create Configuration Manager alert. Then if you use Operation Manager on your environment you should Disable Operation Manager alerts while software updates run. You can also generate alerts on Operation Manager when updates failed.

Then configure the behavior about clients on slow network boundary (slow link) and fallback source.

On Deployment Package, you can create a new update package or add updates to an existing deployment package. Choose a package source to store update binaries.

Next set a distribution point.

On Download Location, specify where download update binaries.

On Language Selection screen, select in which language you want download updates.

On Summary screen, you have the resume of the configuration. Note that you can save the deployment settings as a template.

The next screen can take time because SCCM downloads updates.

To finish, the package is created and deployed.

As you can see on below screenshot, the previous selected updates are deployed.

The post SCCM Software Update PART 4 – Create deployment packages manually appeared first on Tech-Coffee.

In this part I will create an Automatic Deployment Rule to update Windows Server 2012 R2. As a reminder, Automatic Deployment rule enables to create update package automatically according to some criteria such as release date, classification or language. The scheduler for creating update package can be fine-grained configured. It is possible for example to create update package automatically every second Tuesday of each month. Once the package is created, it is automatically deployed to deployment point and servers perform updates on their maintenance period. This update method should not be used on complex environment as Hyper-V cluster or Exchange infrastructure. These examples of environment need orchestrator to avoid downtime of services.

Create an automatic deployment rule

To create Automatic Deployment Rule open SCCM console, go to Software Library and right click on Automatic Deployment Rule and click on New:

So I create an Automatic Deployment Rule called « Baseline – W2012R2 » with the Patch Tuesday template. The current configuration can be saved as a template at the end. Each time a package is created, SCCM create automatically a new Software Update group. If the other option is chosen, a unique Software Update Group is created and updates are added to it. That means each time an update package is deployed, it will contain all updates even those that are already deployed. For Tuesday patching, I recommend to create new Software Update Group.

On deployment settings, specify if you want use Wake-on-LAN (useless on servers because at 99% of the time there are always switch on). Next select the desire logs detail level and the behavior about license agreements.

On software updates screen, set the criteria for choosing the updates that will be added to update package. In my example I choose updates that match these criteria:

• Release or revised on last month.
• Updates target Windows Server 2012 R2.
• Updates have to be English language.
• Updates have to be Critical updates or Definition Updates or Security Updates or Rollups or a simple update.

On evaluation schedule, specify when run the rule to make an update package. On my example, I run the rule every second Wednesday of each month (in France updates are available Wednesday because time difference).

On deployment schedule, specify the update package available time and the installation deadline. Mostly these settings should be configured regarding company security policies.

On user experience screen, set the behavior on clients side. Specify notifications level to display on Software Center, the behavior when the deadline is reached and you can suppress restart on specific devices such as server.

Alerts screen is really useful when Operation Manager monitor IT Infrastructure. It is possible to disable monitoring on servers that will be updated and generates alerts if an update fails. Also a report can be generated on Configuration Manager.

Downloads settings screen enables to configure clients’ behavior for downloading when there are on a slow link (slow site boundaries in SCCM language). For this type of clients, you can specify a fallback distribution point

On deployment package screen, you create your update package. It is necessary to specify a package source: this is the path where update binaries are stored. A folder can’t be used for more than one package source. If a deployment package already exists, you can select it.

On distribution points screen, specify SCCM distribution points where the deployment package will be sent.

On download location screen, select the source of downloading updates.

Then select the languages downloaded …

To finish confirm settings. Note that you can Save as Template your Automatic Deployment rule.

Once your Automatic Deployment Rule is created, it appears in the menu. On the same line, you can see the last error. Here the rule has run without error.

After that Automatic Deployment Rule has run, the update package is created and is deployed.

Then Software Center on clients can install updates on maintenance period. Note that you can install manually updates.

The post Software Update with SCCM PART 3 – Automatic Deployment Rules appeared first on Tech-Coffee.