What are the Software update policy in WMI

 

Software update policy is located in two classes in the WMI namespace:

§  Root\ccm\policy\machine\requestedconfig When the client downloads the policy from MP, it saves it in this WMI class so the CCM client Policy Evaluator can evaluate the policy.

§  Root\ccm\policy\machine\actualconfig Policy Evaluator first checks whether there is a valid policy, and if so, saves it in this wimi class. The actualconfig class is therefore the running configuration for the client, which means it contains all the current settings as defined by the SCCM administrator.

What is Period of Time for Which All Pending Deployments with Deadline in This Time Will Also Be Installed setting

You find this setting in the Software Updates workspace of the Default Settings

 

 

 

 

This setting can be used in junction of When any software Update Deployment Deadline is reached, Install all other software update deployments with deadline coming within a specified period of time.

 

By choosing the above settings we can install Updates on or prior updates if we have available schedule / maintenance Window

How to Enable WUA verbose logging

For troubleshooting purposes, enable verbose logging for the Windows Update Agent by below registry edits :

1.        Open the Registry Editor (regedit.exe).

2.        Navigate to the following registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ Windows\CurrentVersion\WindowsUpdate\Trace

3.        Create the following registry value: Value name: Flags

Value type: REG_DWORD Value data: 00000007

4.        Create the following registry value: Value name: Level

Value type: REG_DWORD Value data: 00000004

What is WUAUCLT.exe

This utility is the Automatic Updates client and is responsible for all of the user interactions involved when deploying software updates, for example displaying the UI for download and install progress, showing the reboot notification, and so on. The Automatic Updates client communicates with the Automatic Updates engine through a private application programming interface (API).

As a utility we can run, WUAUCLT.exe includes the following command line switches:

/DetectNow Forces a detection cycle

/ShowSettingsDialog Opens the UI for “Help Protect your PC: turn on Automatic Updates” which allows you to configure Automatic Updates settings

/ResetAuthorization Resets the cookie and the Software Update Services client ID

/ResetEulas Resets the end user license agreements (EULAs) for updates

 /DemoUI Launches the System Tray icon

Software update data contains what information

Software update data contains what information

What is Metadata and Binary File Data

An individual software update consists of two pieces:

- Metadata

- A binary file

MetaData: The metadata provides information about an update, such as the description, product supported, applicability rules, classification, article ID, file hash information, command line, and even the URL containing the location for downloading a particular update

What are the Firewall considerations to allow urls for software updates

Software Update Point Role in SCCM Secondary Site

When a software update point is installed on a secondary site, the WSUS database is configured as a replica instead of an autonomous WSUS instance, which is how the WSUS database is configured when installing the software update point on a primary site or central administration site.

What are the Firewall considerations to allow urls for software updates

Firewall Considerations for SUP Role

If an organization does not allow the HTTP ports 80 or 443 to be open through the firewall, you can restrict the access to the following domains so that the software update point can communicate with the Microsoft Update Catalog over the Internet:

·         http://windowsupdate.microsoft.com

·         http://*.windowsupdate.microsoft.com

·         https://*.windowsupdate.microsoft.com

·         http://*.update.microsoft.com

·         https://*.update.microsoft.com

·         http://*.windowsupdate.com

·         http://download.windowsupdate.com

·         http://download.microsoft.com

·         http://*.download.windowsupdate.com

·         http://wustat.windows.com

·         http://ntservicepack.microsoft.com

SQL Database to Query MetaData of Software update in SCCM 2012

SQL Database to Query MetaData of Software update in SCCM 2012

Software Updates MetaData Query to get more information on sync process

select * from ci_types

 

 

Each citype_id will have Updates List i.e., CI Unique ID’s, see below when Queries for further

 

you can click the update link in the SDMPackageDigest column to get more details like .exe file name or .msi file that will download from SCCM DP.