Deploying Software Updates Using Configuration Manager

53928

In this post we will see deploying software updates using configuration manager 2012. Software updates in System Center 2012 Configuration Manager provides a set of tools and resources that can help manage the complex task of tracking and applying software updates to client computers in the enterprise.

In Part 1 we saw the installation of Active Directory Domain Services. In Part 2 we created the AD container and delegated the permissions on it. In Part 3 we installed pre-requisites for SCCM server. In Part 4 we installed SQL server, updated the service pack and cumulative update patch. In Part 5 we installed WSUS server role, Configured the firewall to add exceptions to allow the Client Push, Open the SQL ports 1433 and 4022. In Part 6 we installed the SCCM 2012. In Part 7 we saw how to configure Discovery and Boundaries. In Part 8 we installed few site system roles. In Part9 we created and configured custom client device settings, user device settings and deployed configuration manager client agent.

 

Before we deploy the software updates to our systems, we need to update the Intranet Microsoft update service location by creating a policy and linking it to our domain. We will create a separate policy named “Windows Update Policy”.

Deploying SCCM 2012 Part 10 Snap 1

From the Domain Controller, Open Group Policy Management Console. Lets create a GPO and link it to Domain. The name of the policy is Windows Update Policy. Right Click the policy and edit.

Deploying SCCM 2012 Part 10 Snap 2

From the Group Policy Management Editor, Navigate to Computer Configuration, Policies, Administrative templates, Windows Components, windows update.

Deploying SCCM 2012 Part 10 Snap 3

Double click the setting “Specify Intranet Microsoft Update Service Location“. Click Enabled and in the options provide the Server name with HTTP as prefix for both intranet update service and intranet statistics server.

Note : During the configuration of WSUS if you had selected “Create a windows SUS 3.0 SP2 Website” then provide the name of SCCM server along with port number.
For example : http://Server.domain.com : 8530.

Deploying SCCM 2012 Part 10 Snap 4

Click on the setting Configure Automatic Updates, Enable the setting by clicking on Enabled. Under Options choose Auto Download and Schedule the Install under configure automatic updating. Schedule the installation of updates Everyday at 14:00 (You can choose your own schedule time).

Deploying SCCM 2012 Part 10 Snap 5

Now lets create a collection of computers to which we can deploy the updates. In our lab we have a single computer named CLIENT.PRAJWAL.LOCAL, we will create a Device collection and add all windows 7 computers to the device collection.

To create a Device Collection, Right Click Device Collections and Create Device Collection.

Deploying SCCM 2012 Part 10 Snap 8

Click on Browse and Select All Systems as Limiting collection.

Deploying SCCM 2012 Part 10 Snap 9

We will add a Query Rule to group the computers into a collection. Based on this Query the windows 7 computers will be added to the collection.

Deploying SCCM 2012 Part 10 Snap 11

In the Query Rule Properties, Name the query as “Windows 7 Query“. Let the Resource class be System Resource. Click Edit Query Statement.

Deploying SCCM 2012 Part 10 Snap 10

On the Select Attribute Window, click the Drop down list and select Operating System as Attribute Class and Attribute as Caption. Click OK. Choose the operator as “is like” and value as %windows 7%. click OK thrice and click Next.

Deploying SCCM 2012 Part 10 Snap 15

 

Deploying SCCM 2012 Part 10 Snap 16

Deploying SCCM 2012 Part 10 Snap 17

The device collection has been created successfully. Click Close.

Deploying SCCM 2012 Part 10 Snap 19

Lets configure the Software Update Point. Note that we have to select the Products for which the Updates will be downloaded. Under Sites, click Settings, Configure Site Components, Select Software Update point.

Deploying SCCM 2012 Part 10 Snap 21

We will choose windows 7 here. Click OK.

Deploying SCCM 2012 Part 10 Snap 22

To Synchronize the software updates, Click Software Updates from the bottom left pane, Right click All Software Updates and click Synchronize Software Updates“.

Deploying SCCM 2012 Part 10 Snap 25

Click Yes to initiate site wide synchronization of software updates.

Deploying SCCM 2012 Part 10 Snap 24

we can see the synchronization log by opening wsyncmgr.log located in C:\Program Files\Microsoft Configuration Manager\Logs.

Deploying SCCM 2012 Part 10 Snap 26

Wait for few minutes, once synchronized you can see the updates. We will not deploy all the updates, we will now filter the updates by adding criteria. Click on Add criteria. Select Product, Expired, Bulletin ID and Superseded. click Add.

Deploying SCCM 2012 Part 10 Snap 29

Choose the product as Windows 7, Bulletin ID as MS, Expired as NO, Superseded as NO.

Deploying SCCM 2012 Part 10 Snap 30

We will save the search criteria by clicking “Save Current Search” at the top menu. Save is it with any name you wish. Click OK.

Deploying SCCM 2012 Part 10 Snap 31

Now Select all the updates (hold Shift+page Down) , right click on the updates and click Create Software Update Group and name it as Windows 7 Software Update group.

Deploying SCCM 2012 Part 10 Snap 33

We will download the updates and store it in a folder. Select all the Updates from Windows 7 Software Updates and Right Click and click download. In the Download Software Updates Wizard we will create a deployment package. A software update deployment package is the vehicle used to download software updates to a network shared folder, and copy the software update source files to the content library on site servers and on distribution points that are defined in the deployment.

Creating a Deployment Package – Provide a name to the deployment package. We will name it as Windows 7 Update Deployment Package. Now we need to store the updates in a folder so i have created a folder on other drive called Updates. we will use this folder to store all the updates. Inside the Updates folder we will create another folder called Win7 to store only windows updates. Click Next.

Deploying SCCM 2012 Part 10 Snap 35

Click on Add and select your Distribution Point. Click Next.

Deploying SCCM 2012 Part 10 Snap 36

Set the Distribution Priority as Medium. Click Next.

Deploying SCCM 2012 Part 10 Snap 37

Choose Download Software Updates From Internet. click Next.

Deploying SCCM 2012 Part 10 Snap 38

The wizard will now download the updates from internet. This will take some time depending on connection speed and the updates selected.

Deploying SCCM 2012 Part 10 Snap 40

To deploy the software updates, click on Software Update Groups, right click Windows 7 Software Update Group and select Deploy.

Deploying SCCM 2012 Part 10 Snap 42

To deploy the updates to a collection, click on Browse and select All windows 7 Computers. Click Next.

Deploying SCCM 2012 Part 10 Snap 43

Choose the type of Deployment as Required and Detail Level as Normal. Click Next.

Deploying SCCM 2012 Part 10 Snap 44

Select the time as UTC, Select the software available time as As soon as possible, installation deadline as As soon as possible. click Next.

Deploying SCCM 2012 Part 10 Snap 45

Under device restart behavior, suppress the restart for workstations.

Deploying SCCM 2012 Part 10 Snap 46

Click Generate an alert when following conditions are met. Enter the client compliance value as 90. click next.

Deploying SCCM 2012 Part 10 Snap 47

Under Deployment Options select Download Software Updates from Distribution Points and install. click Next.

Deploying SCCM 2012 Part 10 Snap 48

The Deploy software updates wizard has deployed the updates to the target. In our case it is targeted on a Collection “All windows 7 computers“. click close.

Deploying SCCM 2012 Part 10 Snap 49

The updates have been downloaded and will be deployed to the collection.

Deploying SCCM 2012 Part 10 Snap 50

  • Zak

    I’m looking to use SCCM to deploy Flash and Adobe patches and I already have a WSUS in place running 2008R2. I configured the upstream server to be the current production WSUS. I configured SCCM to only grab definition updates. However GPO only has settings to look for one WSUS.

    How do I setup an infrastructure like this? Should I just move the WSUS off the current production server and let the SCCM server manage all WSUS updates? or can I keep the current WSUS in place use it as an upstream server to SCCM and point all clients to SCCM?

    • @Zak – If you are using SCCM and WSUS then you need to decide whether you want to deploy updates to the computers using WSUS or SCCM. I recommend you to take off the WSUS server and let SCCM manage the deployment of Updates.ConfigMgr integration provides better reporting and targeting of updates.

      I have seen most of the times that the users are not satisfied with SCCM when it comes to deploying updates. It’s true that WSUS is very simple to configure and manage. But again SCCM provides you better features than WSUS. So my advise would be to setup an SCCM lab in your environment and deploy updates using it. If you are okay with it move from WSUS to SCCM.

  • Zak

    Thanks, I figured that’s what I’d have to do. btw Thanks for the great walk throughs–I’m installing on 2012 server with 2012 SQL, but the instructions are basically the same.

  • Siddharth Sharma

    Hi

    Very Informative and great pictorial explanation of basics …..
    Thanks for sharing it ………………..

  • Zak

    Can you make sense of this? I have the exact setup as stated above and previous articles, but the WSUS portion I can never get to function.

    Did not find supported version of assembly Microsoft.UpdateServices.Administration. SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    Checking runtime v4.0.30319… SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    Did not find supported version of assembly Microsoft.UpdateServices.Administration. SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    Supported WSUS version not found SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    STATMSG: ID=6607 SEV=E LEV=M SOURCE=”SMS Server” COMP=”SMS_WSUS_CONFIGURATION_MANAGER” SYS=OCS12.OCBOE.LOCAL SITE=OCS PID=2576 TID=8076 GMTDATE=Thu Apr 25 16:04:08.878 2013 ISTR0=”OCS12.ocboe.local” ISTR1=”” ISTR2=”” ISTR3=”” ISTR4=”” ISTR5=”” ISTR6=”” ISTR7=”” ISTR8=”” ISTR9=”” NUMATTRS=0 SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    Remote configuration failed on WSUS Server. SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    STATMSG: ID=6600 SEV=E LEV=M SOURCE=”SMS Server” COMP=”SMS_WSUS_CONFIGURATION_MANAGER” SYS=OCS12.OCBOE.LOCAL SITE=OCS PID=2576 TID=8076 GMTDATE=Thu Apr 25 16:04:08.878 2013 ISTR0=”OCS12.ocboe.local” ISTR1=”” ISTR2=”” ISTR3=”” ISTR4=”” ISTR5=”” ISTR6=”” ISTR7=”” ISTR8=”” ISTR9=”” NUMATTRS=0 SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)
    Setting new configuration state to 3 (WSUS_CONFIG_FAILED) SMS_WSUS_CONFIGURATION_MANAGER 4/25/2013 11:04:08 AM 8076 (0x1F8C)

  • Rajiv

    Hi Prajwal
    How We can force users to internet to download MS Patches&updates,and we just need to be able to report on the updates installed in the client machines from SCCM 2012.
    To be more specific
    Requirements
    1. As part of patching, we will not create a package for windows updates and deploy it to collections client should download the required updates from internet
    2. Also we didn’t want to download the updates and save it locally in our WSUS Server. Windows clients will download the updates from Microsoft directly, but we have to keep track/record of updates installed to client machines using SCCM server.

    Your valuable response will be highly appreciated

    Regards
    Rajiv

    • I don’t think you can generate reports of windows updates installed on client computers through SCCM if the updates have been pushed through WSUS server and not through SCCM server. There is a way to check whether a specific update has been installed on client computer and that is through creating a DCM rule (SCCM 2007) or configuration baseline in SCCM 2012.

      • rajiv

        Thanks Prajwal!!

        This my requirement

        The clients get the list of patches from SCCM, but they actually go to MS to download those patches.

        Regards
        Rajiv

        • So what is the purpose of installing SCCM ?

          • Rajiv

            Ahhhh this is my requirement.Please letme know do we have options to do this.

            • If you are installing windows updates directly from Microsoft update then you cannot generate the reports using SCCM. If you are deploying windows updates through SCCM then you can generate reports by opening the reporting services, Home > ConfigMgr_BLR > Software Updates – B Deployment Management.

  • Vijay

    Hello Prajwal,

    We are in the process of building a package for GMobile map update package. Please let me know if this feature in SCCM can be reused to push data updates to application.

    Vijay

    • May i know what is the extension of the software update package ??

      • Vijay

        These are map files and not so much with a software update (I am guessing you need to know if it is an msi or something similar). We haven’t built a package and are still trying to find if SCCM is a real fit for this purpose.

        We are looking at how gamers are publishing their updates to the clients.

  • Dan

    You do not need to use group policy to set the location of the update server. The config manager client will do this automatically if configured correctly.

  • nick

    I tried step by step all the above but software updates never came up on configuration manager console. every time it just said sync fail.

    There is no definitive guide on internet which works in one shot. Did the installation at least 5 times. Can anybody advise what would i have emissed

    • Have you checked the internet connectivity ?? post the log file…

  • Shane

    This looks like a great way to get updates installed. However, when new patches come out next month, how do you make sure they are getting installed as well. What are the steps for this?

    thanks,
    Shane

  • Kiru Pananthan

    Hi Prajwal

    we have setup sccm 2012 and push the windows updates to client, but we notice still all our client machine getting the windows update from microsoft not from our sccm server, so what could be the issue, we deploy the windows update server patch using GPO, we confirm the windows update from microsoft by looking at our internet management system

    • If you are using SCCM to push the windows updates then you can remove the GPO set for windows updates. I want to know while setting up the SCCM have you installed WSUS again ? Have you configured the WSUS server ?

  • Patrick

    Hi, Prajwal, (sorry for my english)

    I have a question for this part. You have explained in this part how deploy windows updates on pc. It’s okay. should i recreate this package every month with new updates manually or this package auto-update itself?

    cordially,

  • Jemmy

    hi,

    Is it necessary to set a group policy to deploy update, than a SCCM client ??

    i will install only WSUS role then, why SCCM ?/

    regards,

    • You can only specify your WSUS server in group policy. Do not configure anything for deploying updates apart from that. Rest all is taken care by SCCM.

  • Varatharaj

    As per your document I have deployed the patches, but my servers are non sensing the patches on scheduled time. Also I have tried from client wuauclt /detectnow to manually sync patches from sccm server.

    Please let me know what is wrong I am doing.

    • “my servers are non sensing the patches on scheduled time”
      You mean to say that servers are not deploying the patches ?

      Make sure you download the patches on SCCM server and distribute it to the DP first. what schedule did you choose – UTC or client local time ?

  • Varatharaj

    Yes my servers are not installed patches on scheduled time. I have scheduled client local time.

    Already I have download patches to SCCM server locally and have created DP for 2008 server as per your above document.

  • Lavanya Tejasvi

    Hi Prajwal,
    I am currently working on CAmtasia Studio 8 application, which is installing fine without any issue, but SCCM team is triggering failed mail. Request you to helps us in finding out the cause and how to fix the issue.

    Thanks in Advance,

    Regards,

    • May I know what exactly do you mean by “SCCM team is triggering failed mail.” ?? Are you talking about error message ?

      • Lavanya Tejasvi

        The mail will get triggered from sccm not from sccm team.
        When we request a software from software catalog(SCCM), this will trigger a mail to the requested person mail box saying the particular software has been requested on the machine name, target,Date, Estimated time for completion of installation,software name. If the software installation is success, it would trigger success mail. As of now the application is installing well, able to launch the shortcuts but sccm is triggering below failed email.

        Request you to help us in solving the issue.

        The installation of TechSmith Camtasia Studio 8.0.4 has failed for the following computer:

        Tejasvi, Lavanya (TejasviL) on WHQW7YSW0M1L

        The package was requested by Tejasvi, Lavanya (TejasviL).
        You may contact the Service Desk to assist with the installation of this software.

        Regards,

        Owens Corning Desktop Team

        Log file from C:\Program Files\CCM\Logs\execmgr.exe

        Request you to help us in resolving the issue.

  • Lavanya Tejasvi

    Log file from C:\Program Files\CCM\Logs\execmgr.exe

    [SMS_CodePage(437), SMS_LocaleID(1033)]
    instance of SoftDistProgramCompletedSuccessfullyEvent
    {
    AdvertisementId = “OC1202F2”;
    ClientID = “GUID:1281B820-35F2-4B28-BA51-724B4015EA5A”;
    DateTime = “20130530193751.032000+000”;
    MachineName = “WHQW7YSW0M1L”;
    PackageName = “EAT005EA”;
    ProcessID = 2316;
    ProgramName = “Automated”;
    SiteCode = “OC1”;
    ThreadID = 3448;
    UserContext = “NT AUTHORITY\\SYSTEM”;
    };
    ]LOG]!>

    Request you to help us in resolving the issue.

  • Lavanya Tejasvi

    <![LOG[Raising event:

    Log file end.

  • Lavanya Tejasvi

    I could see Camtasia Studio .exe file is still running in the task manager. Is this is the cause to trigger failed mail?
    If so, how to kill the exe running in task manager

    • The software Camtasia studio has been distributed successfully, but its not getting installed on client computer and hence it throws error. I will surely help you out but can you create a ticket here http://prajwaldesai.com/support so that you can attach the error screenshots.

  • Tom Gorgis

    Hi,

    I need to create SCCM 2012 R2 SQL Query on software updates, I’m not really familiar with SQL has anyone created that through the configuration manager console?

    Please let me know thanks

  • Tom Gorgis

    as my above request I need to report on compliance as well

    has anyone done this?

    Any help would be great thanks

  • vijayan

    Hi Prajwal,

    could you please share if you have any process document for Microst security updates deployment in sccm 2012.

    • Nope currently I don’t have any process doc but I can send some time later..

  • Markus Randerath

    Nice tutorial, maybe you can help me with our scenario:
    Three sites, one SCCM at every site. The one at site 1 is the main site Server, the ones on site 2 and 3 are Distribution Points.
    We want the Clients at site 2 and 3 to check at site 1 for the updates but download them from their local Distribution Points. In the GPO there is just one entry for the update Server for detecting and downloading.

    Is there any way to achieve this?

  • Jared

    Looking for a SCCM 2012 report that shows all installed WINDOWS updates.. do you have one available or know how I can create one ? thanks in advance.

  • Orlando

    It’s truly a great and helpful piece of information. Please stay us up to date like this. Thanks for sharing.

  • Ngoni

    Hi

    How do I update an exisiting Software Update Group with new Windows updates

  • arshad hussain

    good info………….

    Regards,
    Arshad

  • Arshad

    Hi Prajwal,

    i would like to know how to remove all this Balck Mark X all expired icon. if right Click no delete option.

    Expired Icon (Many from 2010 ) on All software updates Folder

    The icon with the black X represents a software update group that contains one or more expired software updates.

    Best Regards ,
    Arshad

  • Arshad

    Hi Prajwal,

    i would like to know how to remove old updates ( Present from year 2010 are many update lists) on the all software updates folder which are marked as x (Black color), i am not able to see delete option if i right click. i can filter as expired update with this x Mark , but how to delete & recommended to delete,..?

    But usually i will go to wsus console to clean old updates by update & clean wizard ,

    Best regards,
    Arshad

  • arshad

    Thanks Prajwal…..

    so nice to see your reply & sorry for repeated post i sent . (As i sent from office but i was unable to view my first post later on )

    Best Regards,
    Arshad

  • Arshad

    Hi Prajwal,

    I would like to ask some Calrifcation on sccm 2012 SP1 server :

    (1) As we set all clients workstation Auotmatic update that’ s fine. But servers we are not define boz of it may restart the server after update. when i checked some old collections list of servers update group as windows 2008, windows 2008 R2 etc update schedule every 7 days & set time was there. then i disable that option it could be reason our some server restarting. Then i create new collection for windows update & Manualy push the Server client & it works fine.

    Later we discover that some server windows 2012 & windows 2012 R2 Automatic windows update option was enable & it taken the update from server Internet connection not from SUP . But no issue bcoz i am not push to this server by collection.

    can you send me your link for group policy not to restart the server for manual update & also administrator not able chnage the settings of server windows update.
    Is there any setting need to be disable from SCCM 2012 sp1 conosle for server update apart from collection folder

    (2) If more than 50 Patches availabe for one server, it is advisable to push one time as one collection package or dived it & later push it. if any network bandwidth concern or sccm 2012 sp1 package overload or hang or might be take more time on the software centre to reach. kindly let me know.
    (3) As i created one collection for one server update Push as per our requirment , if server admin say that due to some reason after done the update ,next day if say that unable to see the update on windows update option
    then again we try to push on the same collcetion or need to delete the collection & recreate new collection name for same server.. ..?

    Beacuse once i notice that if try to push with same collcetion name for same server , later will get error as”Microsoft confgration mangment has stopped working” on the collection folder properties

    or when try deploy on the same collection for same server (for same update) error was dot net frame work. Then we to uinstall role of wsus & sup correct…….? (event id same name define software updatepoint etc). Kindly let me this way of soultion for this problem or any other option avaiable for this error to wipe out from SCCM 2012 SP1 Configration Manager………?

    Take your own time & Thanking you in Advance.

    Best Regards,
    Arshad

    • 1) To prevent auto-restart for scheduled Automatic Update installation options, Open Group Policy Object Editor, expand Computer Configuration, expand Administrative Templates, expand Windows Components, and then click Windows Update. In the details pane, click No auto-restart for scheduled Automatic Update installation options, and click Enabled.

      2) What is the size of the package ? It is advised to do this activity in the maintenance time frame..

      3) Before you push the update again check why were the software updates not installed on the servers..You can delete and create a new collection but that’s of no use. Here is the help link :- http://blogs.technet.com/b/sudheesn/archive/2010/11/10/troubleshooting-sccm-part-iii-software-updates.aspx

  • Arshad

    Thanks for Valuable Info

    (1) Sure i will try

    (2) i will ceheck it the package size of both win 2008 r2 & win 2012 r2 & let you know ( Package installed no iusse, update size big boz the windows update was installed almost 6 Months Back & all servers stop working all updates by wsus , the Previous administrator does n’t having sound knowledge of MS Products . After as i handled reecently this job now i Started checking each stuff & need to clear all scrap one by one , so i always asking your guide lines as am new to SCCM & SCOM

    (3) Nice Link & definetly i will read & follow the same. After Local server admin told me that no updates reach to software centre. Next day we login ourself we saw the update avaiable on the software centre as same date of deployed . That is the reason i asked that if patches size is more , then it could be the network bandwidth issue as our setup running more than 60 servers. Anyway in future i will check it my self remotely login to all servers as deployment has been done successfully & also first i will chcek it log file as you suggested to me by your link.

    Once again Thank you very much for all & Glad to see your Reply

    Best Regards,
    Arshad

  • arshad

    Hi Prajwal,

    As any idea how to remove below event id error, as i told you same collection same server push three time. how to get this error
    But t wsus updated fine. but unable to sysnchronize with SUP. as both role installed again but stiil same.
    if any batch file need to remove this entry.

    Best Regards,
    Arshad

    There are > 1 actions of the same type or same name defined – ignoring action DeploySoftwareUpdateAction\r\nSystem.ArgumentException\r\nFound duplicate named action\r\n at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.AddActionToActiveActionList(Object sender, ScopeNode scopeNode, IResultObject resultObject, List`1& activeActions, ActionDescription action, Boolean isActive) at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.BuildActionItems(SnapIn snapIn, SmsNamedValuesDictionary namedValues, Object sender, SmsSiteConnectionNode rootConnectionNode, ScopeNode queryNode, IResultObject resultObject, List`1 actionDescriptions, String helpTopic)\r\n

    • Arshad, have you installed SCCM right click tools or any other tools to manage SCCM tasks ?

    • @Arshad – Found two errors in your log file.

      1)DB Server not detected for SUP SERVERNAME from SCF File.
      2) Sync failed: WSUS update source not found on site SiteCode

      • Markus Weiler

        Hello, great information, thanks for your good documentation!
        I just wondered if any other SCCM user ran into the problem to be able to update the Windows servers (2012, 2008 R2) the “conventional way” via Windows Update, the SCCM server as the WSUS server and therefore being able to choose the time of installation of the already downloaded patches individually while still updating the other clients via SCCM push.
        I searched this post but did not find any suggestions.
        Anyone solved this yet?
        Thanks in advance!

  • arshad

    one more event id Below error related to the above subject

    if any please guide me what to do. (wsus updating no issue)

    Best regards,

    Arshad

    System.NullReferenceException\r\nObject reference not set to an instance of an object.\r\n at Microsoft.ConfigurationManagement.ManagementProvider.WqlQueryEngine.WqlQueryPropertySingleItem.get_BooleanValue() at Microsoft.ConfigurationManagement.AdminConsole.SoftwareUpdateProperties.Utilities.GetSoftwareUpdateGroupIcon(Object sender, ScopeNode scopeNode, IResultObject resultObject, AssemblyDescription& resourceAssembly)\r\n

  • arshad

    Hi Prajawal,
    To be frank all task i am doing form Management console so far & never Checked Tools availablity on my server. (i do not think so but i will check it ) Kindly provide me link to downlaod the Tools & any steps or guide to get off this error , Really helpfull.

    Regards,
    Arshad

    go through wcm.log no use correct . because i knew where the problem.
    i added default Below wsus event wsus error of synchroization

    Log Name: Application
    Source: SMS Server
    Date: 2/2/2014 3:10:06 PM
    Event ID: 6703
    Task Category: SMS_WSUS_SYNC_MANAGER
    Level: Error

    On 2/2/2014 3:10:06 PM, component SMS_WSUS_SYNC_MANAGER on computer ********* reported: WSUS Synchronization failed.
    Message: WSUS update source not found on site xxx. Please refer to WCM.log for configuration error details..
    Source: getSiteUpdateSource.
    The operating system reported error 2147500037: Unspecified error

    • It is good that you have not installed any other tools to manage SCCM tasks.. Looking at your WSUS sync error, can you post WCM.log file ?

  • arshad

    Hi, Prajwal,

    As you told me right click tool i found on google & pasted here below link details (7.8 zip file). i viewd the info, after setup this file & updates for 2012

    If you having correct link or same then no issue.

    Then need to be done what action as reboot the collection only …? etc kindly let me know it.

    Regards,
    Arshad

    The tools require that the SCCM Admin console be installed before the installation can complete.

    Installation Procedures

    Unzip the file and extract the contents to a folder. Run the Install.exe and choose the Configuration Manager RCT Install from the menu.

    Main Installer
    1.Initial Installation Files

    ◦This install will support both SCCM 2007 and 2012 from the same media.

    Updates for 2007
    1.Update 1.0
    ◦Fixes the issue with the interactive command prompt on the client tools

    Updates for 2012
    1.Update 1.3
    ◦Fixes the issue with restarting the ConfigMgr Agent Host on the client tools
    ◦Fixes the issue with performing an Application Deployment Evaluation Cycle on both clients and collections
    ◦Fixes the issue with files being copied to the wrong location.

  • arshad

    i will try to install same toools today (sccm 2012 ) & after that what action need to be done… kindly let me know

    Regards,
    Arshad

  • arshad

    Hi, Prajwal

    As i Checked My DB path on sql SUSDB OK for wsus

    DB path : d:\wsus\wsuscontent.

    siite code need to Check on sup…? if any let me know it

  • arshad

    Hi Prjawal

    Primary site (count roles 9) with same side code

    site sytem server (count role 3 with SUP) with same side code.

    proxy no need as same server. (wsus & sup on same server).

    DB path : d:\wsus\wsusconten . on sql server (susdb) ok

    is it not Beacuse of collection error.

    Regards,
    Arshad

  • arshad

    Hi Prajwal,

    i try find why this sup not dected to SQL Database , If any feedback from your side do let me know it . so something need to settings on DB Correct…..? Thank you very Much for your effort & reply to all Post.

    DB Server not detected for SUP xxxxxxxxxxxxxxxxx from SCF File. skipping.~ $$ 1 actions of the same type or same name defined – ignoring action DeploySoftwareUpdateAction\r\nSystem.ArgumentException\r\nFound duplicate named action\r\n at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.AddActionToActiveActionList(Object sender, ScopeNode scopeNode, IResultObject resultObject, List`1& activeActions, ActionDescription action, Boolean isActive) at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.BuildActionItems(SnapIn snapIn, SmsNamedValuesDictionary namedValues, Object sender, SmsSiteConnectionNode rootConnectionNode, ScopeNode queryNode, IResultObject resultObject, List`1 actionDescriptions, String helpTopic)\r\n

    • I need to know one thing, while installing WSUS did you select WID or Database *WSUS) ?

  • arshad

    Hi Prajwal,

    This below collection device error which i push same name three time…is it root cause…? still this error exist even after install both sup & wsus role.

    Regardsm,
    Arshad

    There are > 1 actions of the same type or same name defined – ignoring action DeploySoftwareUpdateAction\r\nSystem.ArgumentException\r\nFound duplicate named action\r\n at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.AddActionToActiveActionList(Object sender, ScopeNode scopeNode, IResultObject resultObject, List`1& activeActions, ActionDescription action, Boolean isActive) at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.BuildActionItems(SnapIn snapIn, SmsNamedValuesDictionary namedValues, Object sender, SmsSiteConnectionNode rootConnectionNode, ScopeNode queryNode, IResultObject resultObject, List`1 actionDescriptions, String helpTopic)\r\n

  • arshad

    Hi, Prjwal,

    As you mention as per my log file below error yes i also verified that , even windows even id we get normaly wsus not synchronize. Any how now sup Part issue.

    i am very thankfull to you & your response & support me, showing the right path where i am wrong & support me all the way.

    As i done this testing windows 2008 R2 with winndows update with both role, i having old snap shot without windows 2008 R2 update i will revert that back & try to uinstall & install botht role with
    wsus two patches. Lets see it.

    last time i first uinstall only sup, then try to install sup then it ask for server name (sscm2012) ,when i defined that server name name, nae exist menas then i given differert location for sup path , Because we need to uinstall both role (wsus & sup) & then it will be fine. i done after that. But now sup making issue for update & alos that collection name error issue ,so i will try by old snapshot .

    when uinstallting wsus it will ask one more option of check box log file & windows update …better to keep as it is. (only wsus uinstall) correct….?

    first time i done only uinstall & install wsus, sup & .wsus pacthes . i was successfull. no any issue.
    If any feedback from your side for my all description & any steps try before this one.

    Best Regards,
    Arshad

    1)DB Server not detected for SUP SERVERNAME from SCF File.
    2) Sync failed: WSUS update source not found on site SiteCode

    • The roles that you have installed are correct. the issue here is with updates synchronization, do you have any sort of proxy server ?

  • arshad

    Hi Prajawal,

    Last tow days back they applied group policy not to update all the server including sccm 2012 & scom & sql server, i mean to say we are not able to do any windows update on server as our account having no privilage is it impact anything….? ( becuase we stop it will restart Auotmatic, so we planned to take all update from wsus & push later)
    t
    heree is proxy server but no issue as wsus working fine , as sup & wsus as same server.
    then where i need to check..?

    shall i change the above three server full privilage of administrator ( i mean windows update option enable to my all related servers)

    Best Regards,
    Arshad

  • arshad

    @ prajwal

    when i uinnstall wsus ( i remove wsus, log files & windows update) this time is it impact…?

    but wsus working fine (all update also on the “d” drive of sccm 2012 server

    note: wsus & 2 patches i setup manually (downloaded from the net)

    Best Regards,
    Arshad

  • arshad

    Hi Prajwal,

    FYI…..

    My wsus service connected dtabase sql windows 2008 r2 (Database engine) on my sccm 2012 sp1 server . while installing i taken all default.

    WID feaure also installed by defalut on the sccm2012 server , i never removed.

    i requested them to Enable windows update from all my server , as they disable 2 days back..

    Best Regards,
    Arshad

  • arshad

    on the SUP Propertie

    wsus config
    port 8530, ssl port 8531, same config it was working fine

    now i change to both 80 not working (as per my network admin )
    then revert back to same . as i am using windows 2008 R2 DEFAULT recommended this port above one

    If any feedback why not syschnize wsus with sup

    proxy we difne on wsus setting fine, update also fine & port is 8080

    so wusu on my same server (sccm 2012)

    Regards,
    Arshad

  • arshad

    Hi prajwal,

    i would like to know port 8530 & 8531 need to wsus & sup Correct. last time it was working fine the same port. But now my network admin check this port not responding & sccm 2012 Clietnt dig test also not passing.

    this is main reason for wsus not synchronizw with SUP…? Kindly let me know

    My more post on you site which is not required you can delet it

    Regards,
    Arshad

    • what version of WSUS have you installed ? 3.0 SP2 or 4.0 ?

    • WSUS 4.0 (it’s actually 6.2 as per Microsoft) is the newer version and can be only installed on Server 2012. On windows server 2008 R2 you have to install WSUS 3.0 SP2. By default, in Windows Server 2012, WSUS 4.0 uses port 8530. However, WSUS 3.0 uses port 80, by default. Regarding the ports,i think the best practice while installing WSUS is that you pick another port other than port 80 the recommendation is to use port 8530. The firewall on the WSUS server must be configured to allow inbound traffic on these ports.

      Help link – http://technet.microsoft.com/en-us/library/hh852346.aspx

  • ashad

    My version wsus 3.0 with sP2 (WSUS30-KB972455 X64 SP2) with two hotfix as recommanded

    port 8530 & ssl option : 8531 (sup properties)

    Please mention me which port need now 8080 & 8080 ..? i try to put this no response.

    do mean to say above port for windows 2012…? & wsus 4.0 not for windows 2008 R2.

    Please guide me which port i will sepcifiy during installtion , i think when during installation wsus it give us two option by defualt port & second for windows 2012 setup port, i am not remember

    Regards,
    Arshad

  • arshad

    Hi prjawal,

    while setup wsus 3.0 sp2, i will taken as default website (recommended ) port it will take 80.

    different web site take port as 8531 correct. so both try change not synchornzing with sup

    so again keep port 80 both the case for default website (port 80, & ssl 80), . ..?

    kindly let me know the command for test the ports

    Example: Telnet 172.17.28.117 Port : 8531 or other port etc Right..?

    Regards,
    Arshad

  • arshad

    Hi Prajwal,

    Thank you for all Your Reply . Well ,I checkd the your Ms link Regading Ports config.

    Again i will try why not synchronize with SUP. If not later i will fresh installation of WSUS 3..0 & SUP Role . Define as defualt website port 80 as our IT Head told this port as no issue as we tested . Shall i remove both Hotfix of wsus.30 as well …is necessary to remove & add..?

    ( All task now i will do it from the old snapshot without windows update ). If you having any Inputs , kindly Post it .

    If You dont Mind, I suggest you that, keep this current Background for your Webpage .(I feel faster,friendly & Comfortable View)

    Best Regards,
    Arshad

    • Yes remove the hotfixes and uninstall the WSUS. Install it back along with hotfixes. Let me know if it still doesn’t sync..

  • arshad

    Sure, i will do that.

    FYI………….

    As i told Eariler that collection issue(three times Push the same client)

    The Event id error on our SCCM 2012 as Below First one is related to our software update point

    Similar kind of Error as I Viewed on of the Forum ,Related to the software File collection.

    Please find the below (1) My Server

    (2) Found from the site.

    But they not mentioned Any solution for that.

    (1) There are > 1 actions of the same type or same name defined – ignoring action DeploySoftwareUpdateAction\r\nSystem.ArgumentException\r\nFound duplicate named action\r\n at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.AddActionToActiveActionList(Object sender, ScopeNode scopeNode, IResultObject resultObject, List`1& activeActions, ActionDescription action, Boolean isActive) at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.BuildActionItems(SnapIn snapIn, SmsNamedValuesDictionary namedValues, Object sender, SmsSiteConnectionNode rootConnectionNode, ScopeNode queryNode, IResultObject resultObject, List`1 actionDescriptions, String helpTopic)\r\n

    1. (2) Hi, i’m getting this error when i try to run your tools from the ribbon..any ideas?
    There are > 1 actions of the same type or same name defined – ignoring action Software File Collection Cycle\r\nSystem.ArgumentException\r\nFound duplicate named action\r\n at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.AddActionToActiveActionList(Object sender, ScopeNode scopeNode, IResultObject resultObject, List`1& activeActions, ActionDescription action, Boolean isActive) at Microsoft.ConfigurationManagement.AdminConsole.ConsoleUtilityClass.BuildActionItems(SnapIn snapIn, SmsNamedValuesDictionary namedValues, Object sender, SmsSiteConnectionNode rootConnectionNode, ScopeNode queryNode, IResultObject resultObject, List`1 actionDescriptions, String helpTopic)\r\n

    Best Regards,
    Arshad

  • arshad

    Hi Prajawal,

    This below error i told after collection ” Mirosftconfigration has stop working” on sccm 2012 sp1 ( with Blue screen). please detals below, any idea or link to remove this bug (application crash).

    Problem Event Name: CLR20r3
    Problem Signature 01: LRE420M52QQYT0KWXNWESOVVMQF5I2RH
    Problem Signature 02: 5.0.7804.1000
    Problem Signature 03: 50adcdf1
    Problem Signature 04: mscorlib
    Problem Signature 05: 4.0.30319.18408
    Problem Signature 06: 52310b91
    Problem Signature 07: 26fb
    Problem Signature 08: 0
    Problem Signature 09: N3CTRYE2KN3C34SGL4ZQYRBFTE4M13NB
    OS Version: 6.1.7601.2.1.0.272.7
    Locale ID: 1033
    Additional Information 1: 0a9e
    Additional Information 2: 0a9e372d3b4ad19135b953a78882e789
    Additional Information 3: 0a9e
    Additional Information 4: 0a9e372d3b4ad19135b953a78882e789
    Read our privacy statement online:
    http://go.microsoft.com/fwlink/?linkid=104288&clcid=0x0409
    If the online privacy statement is not available, please read our privacy statement offline:
    C:\Windows\system32\en-US\erofflps.txt

    Regards,
    Arshad

  • arshad

    Hi Prajwal,

    As i above mention the both Above post Error , dipslay on properties of software group as i mentioned after My collection push issue.

    If i load dot Netframework 2.0 sp2 with hotfixs will be above Post Error will go…?

    MMC cache file renamed it no use. shall i copy mmc file from scom 2012 server..? for above error.

    when i come back from the office i just added/remove role of sup ..it looks me updateting windowsupdate… i will check it tomorrow.

    so My core issue is above error with details above post ” Microsft Configration has been stop working” on the console blue screen on the sccm 2012.

    i hope wsus syn with sup will be resolved. But i want clear above error desperately so i started add & reomve wsus & sup, & then stuck up with other issue . so kindly give if any feedback for the above Post Error how to clear it out on the Mangement console of 2012 sp1.

    Best Regards,
    Arshad

  • Arshad

    Hi Prjawal,

    Now My wsus & sup working fine. no issue.

    But i need to clear this even id below log file related above earlier My post. If i clear this error then only i can push the client etc.

    Please check this file & give me the any feedback for the same.

    Version=1
    EventType=CLR20r3
    EventTime=130361358317910532
    ReportType=2
    Consent=1
    ReportIdentifier=3491cfbe-8eea-11e3-a6b9-00155db1760e
    IntegratorReportIdentifier=3491cfbd-8eea-11e3-a6b9-00155db1760e
    WOW64=1
    Response.type=4
    Sig[0].Name=Problem Signature 01
    Sig[0].Value=LRE420M52QQYT0KWXNWESOVVMQF5I2RH
    Sig[1].Name=Problem Signature 02
    Sig[1].Value=5.0.7804.1000
    Sig[2].Name=Problem Signature 03
    Sig[2].Value=50adcdf1
    Sig[3].Name=Problem Signature 04
    Sig[3].Value=mscorlib
    Sig[4].Name=Problem Signature 05
    Sig[4].Value=4.0.30319.18408
    Sig[5].Name=Problem Signature 06
    Sig[5].Value=52310b91
    Sig[6].Name=Problem Signature 07
    Sig[6].Value=26fb
    Sig[7].Name=Problem Signature 08
    Sig[7].Value=0
    Sig[8].Name=Problem Signature 09
    Sig[8].Value=N3CTRYE2KN3C34SGL4ZQYRBFTE4M13NB
    DynamicSig[1].Name=OS Version
    DynamicSig[1].Value=6.1.7601.2.1.0.272.7
    DynamicSig[2].Name=Locale ID
    DynamicSig[2].Value=1033
    DynamicSig[22].Name=Additional Information 1
    DynamicSig[22].Value=0a9e
    DynamicSig[23].Name=Additional Information 2
    DynamicSig[23].Value=0a9e372d3b4ad19135b953a78882e789
    DynamicSig[24].Name=Additional Information 3
    DynamicSig[24].Value=0a9e
    DynamicSig[25].Name=Additional Information 4
    DynamicSig[25].Value=0a9e372d3b4ad19135b953a78882e789
    UI[2]=D:\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe
    UI[3]=Microsoft.ConfigurationManagement has stopped working
    UI[4]=Windows can check online for a solution to the problem.
    UI[5]=Check online for a solution and close the program
    UI[6]=Check online for a solution later and close the program
    UI[7]=Close the program
    LoadedModule[0]=D:\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe
    LoadedModule[1]=C:\Windows\SysWOW64\ntdll.dll
    LoadedModule[2]=C:\Windows\SYSTEM32\MSCOREE.DLL
    LoadedModule[3]=C:\Windows\syswow64\KERNEL32.dll
    LoadedModule[4]=C:\Windows\syswow64\KERNELBASE.dll
    LoadedModule[5]=C:\Windows\syswow64\ADVAPI32.dll
    LoadedModule[6]=C:\Windows\syswow64\msvcrt.dll
    LoadedModule[7]=C:\Windows\SysWOW64\sechost.dll
    LoadedModule[8]=C:\Windows\syswow64\RPCRT4.dll
    LoadedModule[9]=C:\Windows\syswow64\SspiCli.dll
    LoadedModule[10]=C:\Windows\syswow64\CRYPTBASE.dll
    LoadedModule[11]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscoreei.dll
    LoadedModule[12]=C:\Windows\syswow64\SHLWAPI.dll
    LoadedModule[13]=C:\Windows\syswow64\GDI32.dll
    LoadedModule[14]=C:\Windows\syswow64\USER32.dll
    LoadedModule[15]=C:\Windows\syswow64\LPK.dll
    LoadedModule[16]=C:\Windows\syswow64\USP10.dll
    LoadedModule[17]=C:\Windows\system32\IMM32.DLL
    LoadedModule[18]=C:\Windows\syswow64\MSCTF.dll
    LoadedModule[19]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clr.dll
    LoadedModule[20]=C:\Windows\system32\MSVCR110_CLR0400.dll
    LoadedModule[21]=C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib45c9588954c3662d542b53f4462268b\mscorlib.ni.dll
    LoadedModule[22]=C:\Windows\syswow64\ole32.dll
    LoadedModule[23]=C:\Windows\system32\CRYPTSP.dll
    LoadedModule[24]=C:\Windows\system32\rsaenh.dll
    LoadedModule[25]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\clrjit.dll
    LoadedModule[26]=C:\Windows\syswow64\OLEAUT32.dll
    LoadedModule[27]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System\79f6324a598a7c4446a4a1168be7c4b1\System.ni.dll
    LoadedModule[28]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\c4477b3ce64d0d612d1ab0dba425b77f\System.Drawing.ni.dll
    LoadedModule[29]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms5ca0ca95b6fcc0d710b63b6200cc178\System.Windows.Forms.ni.dll
    LoadedModule[30]=C:\Windows\system32\RpcRtRemote.dll
    LoadedModule[31]=C:\Windows\system32\uxtheme.dll
    LoadedModule[32]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xml\d91f3556f8011a5d48e1448e3fa8df9e\System.Xml.ni.dll
    LoadedModule[33]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\nlssorting.dll
    LoadedModule[34]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Core\4e69f1e7d86d79012db2d7e0dadc8880\System.Core.ni.dll
    LoadedModule[35]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servf73e6522#\9dcf4adb73ccc5397321c688a6a532c7\System.ServiceModel.Web.ni.dll
    LoadedModule[36]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.ServiceModel\5bca89765ee92dd6018c3782247dba9b\System.ServiceModel.ni.dll
    LoadedModule[37]=C:\Windows\assembly\NativeImages_v4.0.30319_32\SMDiagnostics\5c250132c9d7fb45ec9b331ec2e4ef2e\SMDiagnostics.ni.dll
    LoadedModule[38]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Servd1dec626#\3b483737ce19c597d351cdb1f4eb3da0\System.ServiceModel.Internals.ni.dll
    LoadedModule[39]=C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsBase\ef90aeb894485d14b249d102309b6df3\WindowsBase.ni.dll
    LoadedModule[40]=C:\Windows\assembly\NativeImages_v4.0.30319_32\PresentationCore\b9fe579783a35b57dd7e69375f35e239\PresentationCore.ni.dll
    LoadedModule[41]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\a2eb039301af47660eebc7566ce02b9c\PresentationFramework.ni.dll
    LoadedModule[42]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Xaml\639f444db9491d25b5d158531e1f7d9b\System.Xaml.ni.dll
    LoadedModule[43]=C:\Windows\system32\dwrite.dll
    LoadedModule[44]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\wpfgfx_v0400.dll
    LoadedModule[45]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\WPF\PresentationNative_v0400.dll
    LoadedModule[46]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Configuration\1f56d5786274992934de0c900431c447\System.Configuration.ni.dll
    LoadedModule[47]=C:\Windows\syswow64\shell32.dll
    LoadedModule[48]=D:\Microsoft Configuration Manager\AdminConsole\bin\I386\SqmApi.dll
    LoadedModule[49]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatiod51afaa5#\a8a26de3b92112a0e5910e9fd8192aba\PresentationFramework.classic.ni.dll
    LoadedModule[50]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll
    LoadedModule[51]=C:\Windows\system32\dwmapi.dll
    LoadedModule[52]=C:\Windows\syswow64\urlmon.dll
    LoadedModule[53]=C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll
    LoadedModule[54]=C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
    LoadedModule[55]=C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
    LoadedModule[56]=C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll
    LoadedModule[57]=C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll
    LoadedModule[58]=C:\Windows\system32\version.DLL
    LoadedModule[59]=C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
    LoadedModule[60]=C:\Windows\syswow64\normaliz.DLL
    LoadedModule[61]=C:\Windows\syswow64\iertutil.dll
    LoadedModule[62]=C:\Windows\syswow64\WININET.dll
    LoadedModule[63]=C:\Windows\system32\WindowsCodecs.dll
    LoadedModule[64]=C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.18120_none_72d2e82386681b36\gdiplus.dll
    LoadedModule[65]=C:\Windows\system32\Secur32.dll
    LoadedModule[66]=C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
    LoadedModule[67]=C:\Windows\system32\WtsApi32.dll
    LoadedModule[68]=C:\Windows\system32\WINSTA.dll
    LoadedModule[69]=C:\Windows\system32\d3d9.dll
    LoadedModule[70]=C:\Windows\system32\d3d8thk.dll
    LoadedModule[71]=C:\Windows\syswow64\WINTRUST.dll
    LoadedModule[72]=C:\Windows\syswow64\CRYPT32.dll
    LoadedModule[73]=C:\Windows\syswow64\MSASN1.dll
    LoadedModule[74]=C:\Windows\system32\mscms.dll
    LoadedModule[75]=C:\Windows\system32\USERENV.dll
    LoadedModule[76]=C:\Windows\system32\profapi.dll
    LoadedModule[77]=C:\Windows\system32\WindowsCodecsExt.dll
    LoadedModule[78]=C:\Windows\system32\icm32.dll
    LoadedModule[79]=C:\Windows\assembly\NativeImages_v4.0.30319_32\WindowsForm0b574481#\58599be6aedb2bcc25a266fc1efcc03c\WindowsFormsIntegration.ni.dll
    LoadedModule[80]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio49d6fefe#\19156dbc54c3ded7ba00c53d19b6ee96\PresentationFramework-SystemXml.ni.dll
    LoadedModule[81]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio1c9175f8#\ae01d58bd1cb283ec7b603919e2a8fb3\PresentationFramework.Aero.ni.dll
    LoadedModule[82]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a6349c#503fcc7d094e9583abada0529543ce1\PresentationFramework-SystemCore.ni.dll
    LoadedModule[83]=C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationProviderfca5e7bc50aee6cd0e059bb66fd81ec\UIAutomationProvider.ni.dll
    LoadedModule[84]=C:\Windows\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\75537eea06d1200805de72f3f7751091\UIAutomationTypes.ni.dll
    LoadedModule[85]=C:\Windows\system32\UIAutomationCore.dll
    LoadedModule[86]=C:\Windows\syswow64\PSAPI.DLL
    LoadedModule[87]=C:\Windows\system32\OLEACC.dll
    LoadedModule[88]=C:\Windows\system32\msctfui.dll
    LoadedModule[89]=C:\Windows\system32\WINMM.dll
    LoadedModule[90]=C:\Windows\system32\sxs.dll
    LoadedModule[91]=C:\Windows\syswow64\CLBCatQ.DLL
    LoadedModule[92]=C:\Windows\system32\ntmarta.dll
    LoadedModule[93]=C:\Windows\syswow64\WLDAP32.dll
    LoadedModule[94]=C:\Windows\syswow64\SETUPAPI.dll
    LoadedModule[95]=C:\Windows\syswow64\CFGMGR32.dll
    LoadedModule[96]=C:\Windows\syswow64\DEVOBJ.dll
    LoadedModule[97]=C:\Windows\system32\propsys.dll
    LoadedModule[98]=C:\Windows\system32\LINKINFO.dll
    LoadedModule[99]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Management\13f5eb7285c90c219d2be24eebb55cd9\System.Management.ni.dll
    LoadedModule[100]=C:\Windows\syswow64\ws2_32.dll
    LoadedModule[101]=C:\Windows\syswow64\NSI.dll
    LoadedModule[102]=C:\Windows\system32\mswsock.dll
    LoadedModule[103]=C:\Windows\System32\wshtcpip.dll
    LoadedModule[104]=C:\Windows\System32\wship6.dll
    LoadedModule[105]=C:\Windows\system32\DNSAPI.dll
    LoadedModule[106]=C:\Windows\system32\IPHLPAPI.DLL
    LoadedModule[107]=C:\Windows\system32\WINNSI.DLL
    LoadedModule[108]=C:\Windows\system32\rasadhlp.dll
    LoadedModule[109]=C:\Windows\System32\fwpuclnt.dll
    LoadedModule[110]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\wminet_utils.dll
    LoadedModule[111]=C:\Windows\system32\wbem\wmiutils.dll
    LoadedModule[112]=C:\Windows\system32\wbemcomn.dll
    LoadedModule[113]=C:\Windows\system32\wbem\wbemprox.dll
    LoadedModule[114]=C:\Windows\system32\wbem\fastprox.dll
    LoadedModule[115]=C:\Windows\system32\NTDSAPI.dll
    LoadedModule[116]=C:\Windows\system32\NLAapi.dll
    LoadedModule[117]=C:\Windows\system32\napinsp.dll
    LoadedModule[118]=C:\Windows\System32\winrnr.dll
    LoadedModule[119]=C:\Windows\system32\wbem\wbemsvc.dll
    LoadedModule[120]=C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18201_none_ec80f00e8593ece5\comctl32.dll
    LoadedModule[121]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Runt19c51595#\4de15d6ceb924c6f1029f69bf61f1f46\System.Runtime.Caching.ni.dll
    LoadedModule[122]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Dataab04fef0fc6f97df51351e743e30e7a\System.Data.ni.dll
    LoadedModule[123]=C:\Windows\Microsoft.Net\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll
    LoadedModule[124]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Numerics\139993b400194f04600f318d33c89fbf\System.Numerics.ni.dll
    LoadedModule[125]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Presentatio84a7b877#\ff13f9fe7d9433f2f399f805f8106ff5\PresentationFramework-SystemData.ni.dll
    LoadedModule[126]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Wind0de890be#c7d2553263cec9c1a43652c1cf91e13\System.Windows.Forms.DataVisualization.ni.dll
    LoadedModule[127]=C:\Windows\Microsoft.NET\Framework\v4.0.30319\diasymreader.dll
    LoadedModule[128]=C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Web.Services\b5fd06157db989bbf02ee1a3cd6a583b\System.Web.Services.ni.dll
    LoadedModule[129]=C:\Windows\system32\rasapi32.dll
    LoadedModule[130]=C:\Windows\system32\rasman.dll
    LoadedModule[131]=C:\Windows\system32\rtutils.dll
    LoadedModule[132]=C:\Windows\system32\winhttp.dll
    LoadedModule[133]=C:\Windows\system32\webio.dll
    LoadedModule[134]=C:\Windows\system32\credssp.dll
    LoadedModule[135]=C:\Windows\system32\dhcpcsvc6.DLL
    LoadedModule[136]=C:\Windows\system32\dhcpcsvc.DLL
    LoadedModule[137]=C:\Windows\assembly\NativeImages_v4.0.30319_32\Accessibility\ab5a4c4706329ed536e1f90ce81766f2\Accessibility.ni.dll
    FriendlyEventName=Stopped working
    ConsentKey=CLR20r3
    AppName=Microsoft.ConfigurationManagement
    AppPath=D:\Microsoft Configuration Manager\AdminConsole\bin\Microsoft.ConfigurationManagement.exe

    Best Regards,
    Arshad

  • Arshad

    Hi Prajwal,

    i submitted My Ticket to your Portal

    Best Regards,
    Arshad

  • Arshad

    Fine. I Replied to you as well.

    Best Regards,
    Arshad

  • Velda

    Thanks Prajwal.. Installed and configured the SUP without any issues..Deployed the software updates without any issues. Wonderful post.

  • arshad

    Hi Prajwal,

    i would like to know as our server all windows 64 bit based sytem, But from Microsoft we get two tryp security patches as below mention. we need deploy both or only 64 bit Version….?

    •A 64-bit (x64-based) version
    •An Itanium-based version

    Best Regards,
    Arshad

  • arshad

    Hi Prajwal,

    i would like to know how to resolve the Asset Intelligence Certificate below Error

    Asset Intelligence synchronization point status: Expired credentials/certificate/token. Need to re-provision online account

    My Last update was 2/10/2014 @ 11: 53 pm

    i checked AIUupdate.log file & pasted some text.

    Not Before]
    6/19/2012 11:03:31 PM

    [Not After]
    6/19/2015 11:03:30 PM

    Asset Intelligence Catalog Sync Service Warning: 0 : Wed, 12 Feb 2014 22:54:13 GMT:WebException trying to enroll: Status = ProtocolError
    Asset Intelligence Catalog Sync Service Error: 0 : Wed, 12 Feb 2014 22:54:13 GMT:Retrieve Machine Cert, Error – The remote server returned an error: (407) Proxy Authentication Required.
    Asset Intelligence Catalog Sync Service Error: 0 : Wed, 12 Feb 2014 22:54:13 GMT:Exception attempting sync – The remote server returned an error: (407) Proxy Authentication Required.
    Asset Intelligence Catalog Sync Service Information: 0 : Wed, 12 Feb 2014 22:54:13 GMT:Already 4 retries, clearing retry schedule
    Asset Intelligence Catalog Sync Service Information: 0 : Wed, 12 Feb 2014 22:54:13 GMT:1 Data/Status copied to outbox

    Best Regards,
    Arshad

    • Hi Arshad, can you check your proxy authentication information in the AI Sync Point configuration. There seems to be some problem there..

  • arshad

    One More Query Prajwal,

    on Reportting folder of Console Manager i get this below error while i try to take any kind of report.

    ystem.Web.Services.Protocols.SoapException: An error has occurred during report processing. —> Microsoft.ReportingServices.ReportProcessing.ProcessingAbortedException: An error has occurred during report processing. —> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Cannot impersonate user for data source ‘AutoGen__5C6358F2_4BB6_4a1b_A16E_8D96795D8602_’. —> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. Ensure the user name and password are correct. —> System.ComponentModel.Win32Exception: Logon failure: unknown user name or bad password
    at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
    at Microsoft.ReportingServices.WebServer.ReportingService2005.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)

    ——————————-
    Microsoft.ConfigurationManagement.ManagementProvider.SmsException
    An error has occurred during report processing.

    Stack Trace:
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.GetParameters()
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.LoadParameters(IReport report, Collection`1 navigationParameters, IResultObject resultObject)
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ReportViewerPresenter.Worker_DoWork(Object sender, DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

    ——————————-

    System.Web.Services.Protocols.SoapException
    System.Web.Services.Protocols.SoapException: An error has occurred during report processing. —> Microsoft.ReportingServices.ReportProcessing.ProcessingAbortedException: An error has occurred during report processing. —> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Cannot impersonate user for data source ‘AutoGen__5C6358F2_4BB6_4a1b_A16E_8D96795D8602_’. —> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. Ensure the user name and password are correct. —> System.ComponentModel.Win32Exception: Logon failure: unknown user name or bad password
    at Microsoft.ReportingServices.WebServer.ReportingService2005Impl.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)
    at Microsoft.ReportingServices.WebServer.ReportingService2005.GetReportParameters(String Report, String HistoryID, Boolean ForRendering, ParameterValue[] Values, DataSourceCredentials[] Credentials, ReportParameter[]& Parameters)

    Stack Trace:
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.GetParameters()
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ParameterPresenter.LoadParameters(IReport report, Collection`1 navigationParameters, IResultObject resultObject)
    at Microsoft.ConfigurationManagement.AdminConsole.SrsReporting.ReportViewerPresenter.Worker_DoWork(Object sender, DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

    shall i go head with add/ remove this role & Try it.

    Best Regards,
    Arshad

    • An error has occurred during report processing. —> Microsoft.ReportingServices.ReportProcessing.ReportProcessingException: Cannot impersonate user for data source ‘AutoGen__5C6358F2_4BB6_4a1b_A16E_8D96795D8602_’. —> Microsoft.ReportingServices.Diagnostics.Utilities.LogonFailedException: Log on failed. Ensure the user name and password are correct. —> System.ComponentModel.Win32Exception: Logon failure: unknown user name or bad password

      Check the credentials configured for using reporting services..

  • Arshad

    Hi Prjawal,

    Thanks for your quick Response.

    I agreed with you that log file shows us proxy Credential Required. Couple of weeks Back Our Network admin included SCCM 2012 sp1 to Proxy authentication Before it was excluded , Later I had issue with wsus & sup then I added to proxy both Role working fine.

    For AI & Reporting Service not added myself to proxy, it was working since 2 days Back Dated
    (10/2/2014). Then it display with error as earlier post . (Last week works because it was on the cache…?)

    Before posting this log, I try to check this proxy option I am not able to see

    (1)Asset Intelligence I can see Synchronization option , port 443 without Highlighted & Browse path Located empty for the Certification
    SCCM account with ASSET Intelligence Privileged.

    So how can to see the proxy option AI, Please give me the link or screen shot

    Or send to my arshadhu@gmail.com

    Last option is to remove the R ole of AI & add it again. Then maybe we find the proxy option while we configuring the same.

    (2)Also for Reporting service Same, I can see SCCMadmin account. & SQL database path.

    But I am not able to remember all the options & anywhere not see proxy option for both.

    Last options to me add/remove & then proxy while configuring.

    So how can to see the proxy option also Report role Service, Please give me the link or screen shot

    Or send to my arshadhu@gmail.com

    Thanking You

    Best Regards,
    Arshad

  • Arshad

    Hi Prajwal,

    on My SCCM 2012 Wuahandler.log. below Error

    Unable to read existing resultant WUA policy. Error = 0x80070002.

    All my client unable to take updated from WSUS after done the proxy settings . on My SUP settings both port configure to 80.

    MS update to WSUS 3.0 fine. Also on Domain GP Port 80 as well as SCCM URL Define , we having other domain only BDC

    I would like to know why clients are not able to take the updates from WSUS 3.0. Please Give your Inputs.

    Best Regards,
    Arshad

  • arshad

    Thanks for Reply.

    Well, Ports 8530 & 8531 they are not using . As default 80 only. if i go by web page http://lmmsccm: 80 ..working fine.

    As default for windows 2008 R2 , SUP ( 80 & 443) , now as testing i Changed to 80 & 80 But no luck.

    If i try to do again Exlude (it was old settings working fine) my proxy settings for SCCM will it work..?, & consider your ports settings as well (default for windows 2012 server ) & get back to you.

    Best Regards,
    Arshad

  • Wilhelmina

    Thanks for sharing info. I truly appreciate your efforts.

  • Kubilay Elmas

    Hi,
    Great articles. Really usefull information. I’ve been following your articles whenever I got stuck in my SCCM 2012 R2 deployment. There is one thing that I could not figure it out though. I hope you have the answer for me and I’ll greatly appreciate it if you can let me know.

    Regarding the WSUS management… My WSUS deployments working fine. I’ve already approuved all of the required updates in my domain. When I deploy a new computer in domain, I install right away all of the approuved updates on it. After that, just to try it, I ask Windows 7 to look for updates from Microsoft online instead of my WSUS server and it finds bunch of other security updates….

    I’ve noted thoses security updates that would not appear in my SCCM updates console and I am trying to find a way to include theses updates in my WSUS. I hope I was clear enough.

    I would really appreciate if you can point me out to the right direction as this issue starts to bug me!

    Thanks in advance.

  • Mour

    I have to thank you for the efforts you have put in penning this site.

  • Stephen Daugherty

    You may have answered this on already but i’m confused as to why you need to configure the GPO. It seems if you are Deploying the updates to the machine then why does it need to look at WSUS for updates?

    • Hi Stephen, the WSUS GPO is not required if you are using SCCM to deploy updates. While I was creating the post I had tested the updates deployment keeping WSUS GPO in place and it had worked fine.

  • Hi, Prajwal!
    I have all adjusted as it’s written in article, except I did not adjust a group policy.
    Such problem: I cant deploy updatings on a collection.
    All the clients were reporting a status of “unknown” for all the updates. Did you have a similar problem sometime or can you advise something?
    Thanks in advance

  • Pravin Mori

    Package

    Success: The software updates were placed in the existing package:

    Name=Windows XP Update

    Software updates downloaded from the internet

    Warning: Update for Windows XP (KB883921)

    Errors

    There was an error downloading the update. (407)

    Warning: Update for LIP SP2 MUI Resource Loading (KB913808)

    Errors

    There was an error downloading the update. (407)

    Warning: Update for Windows XP (KB904942)

    Errors

    There was an error downloading the update. (407)

    Warning: Microsoft .NET Framework 2.0: x86 (KB829019)

  • Sharda Giri

    How to get the report and to see how many machines got updated with latest patch…In my case am generating the report called Enforcement state for deployment…but in this report every month i will get some 100 machines with enforcement state unknown….can you let me know what is this enforcement state mean and will this machines get update automatic or so we need to go and update one by one manually…or is there any other report where i can get compliance report……

  • Anusha Raveendran

    Hi Prajwal,

    This might be a real dumb question. I’m new to SCCM and would like to know if the patching could be done in SCCM 2012 without group policy?

    • Group policy doesn’t come into picture when you are deploying updates via SCCM. You can disable the configure windows updates settings and let SCCM take care of windows deployment.