IT Consultant Everyday Notes

Just some problems/solutions storage

Category Archives: Updates

SCCM: SCUP 2011 on Windows Server 2016

found a nice post ( http://www.slr-corp.fr/2017/02/tips-tricks-installing-system-center-updates-publisher-scup-2011-windows-server-2016/) describing how to Install SCUP 2011 on Server 2016. Normally installation fails due to WSUS version check, but if you change WSUS version to  6.3.9600.1777 in registry (HKLM\SOFTWARE\Microsoft\Update Services\Server\Setup VersionString) for time of SCUP installation you can apparently finish SCUP installation. Of course without any support from MS Smile

or, as mentioned in the post comments just run SCUP .msi with /qb switch Winking smile

Meanwhile people continue to vote for this feature for SCCM CB here: https://configurationmanager.uservoice.com/forums/300492-ideas/suggestions/8803711-3rd-party-patching-scup-integration-with-sccm-co

SCCM: SCCM needs update to use servicing feature for Windows 10 1607

Microsoft published a note: Update your ConfigMgr 1606 SUP servers to deploy the Windows 10 Anniversary Update.

It looks like SCCM servicing feature won’t work with KB and manual steps when use it for upgrade to W10 1607 (Anniversary Ed and following builds).

 

Workaround – use OSD.

SCCM: Downloading updates fails zero percent complete

From Steve Thompson’s blog:

Examined a server recently that refused to download deployed security updates. This server was also a Distribution Point in a remote location. Further, this site is running CM Current Branch read more

SCCM: Be careful with Windows 10 Servicing Plans!

SCCM CB (Currently 1511) supports new Windows 10 Servicing model. There is an option to create a Custom Servicing Plan an deploy it to a collection od Windows 10 Computers.

This approach is similar to Automatic Deployment Rule for regular updates. It will automatically download and put the new builds in a Deployment package.

There is a huge surprise though:  Custom Servicing Plan will download/distribute to DPs all versions of the build (different languages and Windows Editions) regardless the language you selected during the Servicing Plan creation. Each build is currently ~2GB, so it will be significant amount overall. Not sure why MS decided to to that and where is their QC. Probably it is a part of a new policy when products are pushed to the market half-backed and tuned-up after.

At this point I would recommend do not use servicing plans, but just a right-click necessary build in build list, download/distribute this and only this build to deployment package/DP and deploy it to a collection the same way we do for regular updates.

 

image

Kent Agerlund also suggested to Decline all unnecessary builds in WSUS manually, in this case you should be able to use Custom Servicing Plans.

SCCM: The complete guide to Microsoft WSUS and Configuration Manager SUP maintenance

SCCM 2012: SUP does not synchronize updates

I noted my ADR did not created a Software Group for Patch Tuesday. I checked Software Updates and found fresh updates were not sync’ed on schedule. Manual sync did not help either.

Resolution: remove Classifications from SUP properties, wait while it will be sync’ed to WSUS. Add classification again and restart Update Synchronization.

In my case fresh updates were synchronized successfully after that.

SCCM 2012: SCCM 2012 SP1 Client update failed. Error: “Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101

UPDATE: Microsoft published updated binaries for SCCM 2012 SP1 addressing this (and other minor) issues. You should use this new file set  for new installations. Links are here: http://blogs.technet.com/b/gladiatormsft/archive/2013/01/26/you-may-need-to-re-download-configuration-manager-2012-and-endpoint-protection-2012-sp1-binaries.aspx

 

I upgraded my Lab SCCM to 2012 and decided to try “Client autoupdate” feature introduced with SCCM 2012.

Unfortunately the attempt failed and I saw

Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101

in ccmsetup.log on the Client.

Signing certificate for the msi looks like:

image

so it looks expired for me  Smile

Fortunately Microsoft published http://support.microsoft.com/kb/2801987  – Cumulative update 0 (CU0)  including an update (download)

I download the update and ran it on my SCCM

image

it did not pass from the first time, of course:

image

I should say the warning is a bit confusing – from the first sentence – Reboot is not required, from the second – I must restart the computer. Winking smile. Reboot the server and try again!

This time it looks better:

 

image

image

 

create packages:

image

and proceed with install:

image

Checking certificate again:

image

and the msi is validated successfully and the client is installed:

image

Do not forget to deploy the update to another Primary servers.

Anoop found some confusion between KB and the update wizard: http://anoopcnair.com/2013/01/14/configmgr-2012-sp1-kb-2801987-confusing-information-in-kb-article-vs-wizard/

I still think the updates is not necessary for CAS…

SCCM 2012: Access Denied while trying to download updates

I tried to download monthly updates to my Deployment Package. The attempt failed with Access Denied for all updates. It turned out that even my account is a local admin on the SCCM server I need to add it with Full rights to the source share (both NTFS and Share permissions) where my Deployment Package is located.

 

As soon as I added the account implicitly and granted rights to it SCCM successfully downloaded necessary updates to the Deployment package.

SCCM 2012: KB2506143 breaks SCCM 2012

SCCM 2012: CU2 installation failed

Microsoft published CU2 for SCCM 2012 recently. I faced installation issues trying to get it installed. In GUI installer it failed on the second step (update installation).

In logs (c:\windows\TEMP\configmgr2012-rtm-co2-kb2780664-emu.msi.log”) I found:

MSI (s) (B8:F4) [10:17:12:708]: Note: 1: 1708
MSI (s) (B8:F4) [10:17:12:708]: Note: 1: 2205 2:  3: Error
MSI (s) (B8:F4) [10:17:12:708]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1708
MSI (s) (B8:F4) [10:17:12:708]: Note: 1: 2205 2:  3: Error
MSI (s) (B8:F4) [10:17:12:708]: Note: 1: 2228 2:  3: Error 4: SELECT `Message` FROM `Error` WHERE `Error` = 1709
MSI (s) (B8:F4) [10:17:12:708]: Product: Cumulative Update 2 for Configuration Manager RTM (KB2780664) — Installation failed.

I copied an extracted .msi file to a separate folder and tried to run it from there. This time I had clearer errors:

1. WDS is running and need to be stopped

2. There is no enough space on drive C: (even though requisites check passed just fine!)

 

Resolution:

1. I manually stopped WDS

2. I freed 200MB of space on C:\ (error asked for 74MB and I had them free on c: so I decided to free more just to be on safe side)

After that I restarted GUI installer and it finished without errors.