Installing patches using SCCM

[namiko78]

We are getting rid of WSUS and using SCCM 2012 R2 only. Is there a way to trigger all “available” software to install via batch patch, and ideally reboot afterwards? When i ask it to check for updates the usual way, it says no updates, yet they’re sitting in SCCM software center waiting to be installed.

Thanks

[doug]

SCCM actually relies on its own WSUS server, so I’m not sure that you are truly getting rid of WSUS. In any case, the WSUS that SCCM uses is completely “owned” by SCCM and is not compatible with 3rd party update utilities such as BatchPatch. That said, in order to use BatchPatch you would have to either point your targets to a new WSUS that is not controlled by SCCM, or you could instruct BatchPatch to search for updates on Windows Update or Microsoft Update instead of your local SCCM WSUS.

-Doug

[ettexor1]

Hello, I know this post was made 2 years ago but has there been any change in batchpatch/sccm patching ability? I know of other third party tools that can now patch servers and apply sccm approved updates, can batch patch now do this?

[doug]

BatchPatch cannot currently do this. What other third party tools are you referring to? I’m not aware of any that do what you are describing, but if you’re able to point us to the tools that you are speaking of, we’ll research them to see what we might be able to do.

-Doug

[ettexor1]

Hi Doug, I’m just beginning to trial some now, Ivanti Patch for SCCM and SolarWinds Patch Manager apparently can…

[doug]

I think you’ve got it backwards. Ivanti Patch for SCCM is a plugin for SCCM that enables you to deploy/update third-party apps through SCCM. You would still be working inside of SCCM as your console, not the other way around. I believe SolarWinds has something similar. In either case I think you are asking for or hoping for the opposite behavior where you can be working inside of the third-party app to control SCCM. I don’t think such a thing exists. And frankly, I don’t really understand what the purpose of having SCCM is if you want to use a third-party tool to apply the updates that have been approved in SCCM. Please update me here if you find that I am somehow mistaken about this.

Thanks,

Doug

[ettexor1]

Hi Doug, yes I think you’re right, all the tools I’ve seen so far integrate into the sccm console…haven’t found any (other than internally developed tools) that patch directly by themselves.

[doug]

Thanks.

[ettexor1]

Hi Doug, have found these useful references which may help you implement something into batch patch in future:

https://gallery.technet.microsoft.com/SCCM-Configmgr-Powershell-ebbb2c0e

https://timmyit.com/2016/08/01/sccm-and-powershell-force-install-of-software-updates-thats-available-on-client-through-wmi/

[doug]

Thank you. We’ll take a look!

[Author]

Posts