Deep Dive in Microsoft SCCM Software Updates Client and Server Components
Вставка
- Опубліковано 5 лют 2025
- In this video guide, we will be performing a deep dive in the software updates feature in Microsoft SCCM. This will include client and server-side components. Some topics covered are client policy, scanning, WMI, StateMessages, StateMgr, Summarization and more!
For additional resources see setupconfigmgr...
#SCCM #ConfigMgr #Updates
Well in this is one of the best videos i have seen for an explanation on patching , Big Kudos
philip price Glad it was helpful! - Justin
This series of Config Mngr tutorials are amazing! The best I have found (including video training behind a pay wall). Thank you.
Thanks for watching!
Justin, just wanted to thank you for your amazing work Man.
this series has to be the best out there on youtube for SCCM
Thank you!
I think you've just helped quite a number of regular ConfigMgr admins into quickly becoming hard core debugging specialists :-)
Thanks for watching.
Excellent. Educational and informative as usual. Learned stuff I did not know even existed. Thank you.
Glad to hear!
Justin hi, I'm discovering your deep dive videos recently and these are amazing. Please do more, a video about troubleshooting Windows Updates would be great. Thanks a lot.
Well explained in details . what a great deep understanding of SCCM .
Thanks for the feedback
Another Excellent Deep Video. . Amazing video. . 👌👌
Thanks for watching!
It is the Best Video that I 've ever seen on Software Updates.. ..I got a Pretty Basic question-- What exactly is the difference between Scan Cycle and Evaluation Cycle
Scan cycle = full scan against the WSUS catalog. This can detect any changes in stats of updates
Eval = Scan against software update groups targeting the device from SCCM.
@@PatchMyPC Thanks and sorry for the extremely delayed reply.. In that case we Should not need WSUS server to be available for Eval.. right as its only done against Software Update groups in SCCM?
Thank you, this was very helpful in my understanding of how updates work. Keep up the good work
Thanks for the feedback!
Thanks for watching.
Justin - you're pushing out some awesome content man.
Thanks for the feedback!
Thanks for watching.
Very well explained! been researching most of today as to why my updates are showing as "not required" and I have no way to confirm this.. but with the WMI Browser that explains exactly what i was after
Awesome!
best knowledge found ever Thanks much
Excellent video! Thanks for posting!
Pedro Röseler thanks for the feedback!
Justin, A Big Thank You brother!
Very welcome 🙏
@@PatchMyPC Thanks for accepting my request on LinkedIn.
Very Simple but bang on target. Thanks Justin.
nawaz kazi thanks for watching
Excellent explanation, I just want to know few things like below, my question may be dumb but want to know more.
1. When we target 22 updates to a client machine with different categories, how the client WUA will understand that this update is needed or not needed ?
Example: If i deploy window10, windows7, office 2016 and other third party patches then what is machine will follow the process to define which is required and which is not required, like to a windows 10 machine winows 7 patches are no longer applicable but how this can validate in technical aspects against the explanation ?
Applicability is based on the WUAgent scanning and that's reported the results to SCCM/WMI
Very Helpful for patching....Thank You
Thanks for watching!
Thanks
Ecellent Explanation.
Thanks
Excellent video..
Thanks for watching!
:) , thanks for posting this video , it is very helpful to me, also I have subscribed your channel for further videos from you, thanks again .
Question, recently I’ve noticed we had had a much lower compliance for our SUGs. In the WMI explorer If I drill down to the CCM_AssignmentCompliance the instance is blank as well as CCM_targetedupdates. I’m running as an admin and other instances are showing up, but having trouble with those compliance reporting. And idea why this would stop working and those instances would be blank?
Did you figure this one out.
What if targetupdateWx1 class not loading any instance?what could be d isssue?
GetUpdateInfo - failed to get targeted update, error = 0x87d00215. from updatedepoyment.log..Help me to troubleshoot this error
This is pretty generic one, usually it's not really any issue.
Patch My PC Thank you..You’re videos are really helpful..
Please I don’t see or fine the link for WMI Explorer application, can you please share it ?
Should be on github, should be able to just google it
Hello if I check a server the day before I am to patch it, and I see that the sccm server has answered and updates are pending by the systray, but then the very next day I go to patch no updates are showing to run from one day to the next, who is to blame the client server or the sccm server.
Sorry, I don't have enough context or details to be helpful here.
Hi,
I need your support on one issue
I have configure adobe flash catalog using third party update in 1806 then i have remove that catalog and i ihad syn the catalog several time but tye flash updates doesn't want to reappear
Did you enable the product in your software update point?
@@PatchMyPC yes i did but no luck
What classifications do you have enabled?
@@PatchMyPC I am selecting all classification except service packs and tools
Very useful video for patching
Thanks for watching!
Hey, I’m having an issue where my SCCM can’t download any updates from Microsoft. My SCCM is on Azure and connected directly to the cloud. Any ideas where to start troubleshooting ?
Could you look at CAS.log and DataTransferManager.log on the client?
Hi Justin, Thank you for the video its very helpful , i Just have a question how you deploy third party softwares do you have Add on installed if please tell me the name of it.
Hey Kareem, we are actually using our own third-party patch management solution for SCCM from Patch My PC :). Learn more at patchmypc.net/third-party-patch-management-sccm-scup-catalog
Hi Justin
Great Video!!
Where can I find the other values for the wmi class "CCM_TargetedUpdateEx1"
I am interested in some of the other properties like UpdateAction and UpdateState.. Thanks!!
You figure this one out?
@@PatchMyPC this is what I found
"0" = 'No Content Sources'
"1" = 'Available'
"2" = 'Submitted'
"3" = 'Detecting'
"4" = 'Downloading CIDef'
"5" = 'Downloading SdmPkg'
"6" = 'PreDownload'
"7" = 'Downloading'
"8" = 'Wait Install'
"9" = 'Installing'
"10" = 'Pending Soft Reboot'
"11" = 'Pending Hard Reboot'
"12" = 'Wait Reboot'
"13" = 'Verifying'
"14" = 'Install Complete'
"15" = 'State Error'
"16" = 'Wait Service Window'
@@PatchMyPC
$TargetedUpdates = Get-WmiObject -Query "Select * from CCM_TargetedUpdateEX1 where UpdateState = 0" -Namespace root\ccm\SoftwareUpdates\DeploymentAgent
if ($TargetedUpdates) {
$statusHash = [hashtable]@{
"0" = 'No Content Sources'
"1" = 'Available'
"2" = 'Submitted'
"3" = 'Detecting'
"4" = 'Downloading CIDef'
"5" = 'Downloading SdmPkg'
"6" = 'PreDownload'
"7" = 'Downloading'
"8" = 'Wait Install'
"9" = 'Installing'
"10" = 'Pending Soft Reboot'
"11" = 'Pending Hard Reboot'
"12" = 'Wait Reboot'
"13" = 'Verifying'
"14" = 'Install Complete'
"15" = 'State Error'
"16" = 'Wait Service Window'
}
$iMissing = 0
$UpdatesMissing = @()
$data = $TargetedUpdates | ForEach-Object {
#get the GUID
$uID = $_.UpdateID | Select-String -Pattern "SUM_[0-9a-fA-F]{8}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{4}\-[0-9a-fA-F]{12}" | Select-Object -Expand Matches | Select-Object -Expand Value
#strip out the SUM_
$uID = $uID.Remove(0, 4)
$uBulletinID = ""
$uTitle = ""
$uPercentComplete = $_.PercentComplete
$uStatus = $statusHash[$_.UpdateStatus.tostring()]
#[decimal]$StatusNo = $_.UpdateStatus
#$uStatus=$statusHash.ContainsValue($StatusNo)
#query the update status from WMI
Get-WmiObject -Query "Select * from CCM_UpdateStatus where UniqueID = '$($uID)'" -Namespace root\ccm\SoftwareUpdates\UpdatesStore | ForEach-Object {
$iMissing++
$uBulletinID = $_.Bulletin
#if there is no MS00-000 ID swap it for the KB article number
if ($uBulletinID -eq "") { $uBulletinID = "KB$($_.Article)" }
$uTitle = $_.Title
}
[pscustomobject]@{
CompuetrName = $env:COMPUTERNAME
BulletinID = $uBulletinID
Title = $uTitle
PercentComplete = "%$uPercentComplete"
Status = $uStatus
}
}
}
This is fantastic!
John Bart thanks for the feedback!
One request just explain the logs with merging the logs and also explain how to get content id from update handler and need to verify in ctm log and later we need to find the dts log pls help me 🙏🙏🙏🙏🙏🙏
Thanks for watching!
Deep Dive SCCM concepts : youtube.com/@MECMian?si=3DUfxmTjDkeX4we4