Results 1 to 6 of 6

Thread: Management Manual updates SCCM

  1. #1
    Join Date
    Jul 2010

    Management Manual updates SCCM

    Managing updates of definitions is an important step in the management of Forefront Client EndPoint Protection. But the problem with me is that I am not aware about the Management Manual updates of SCCM. I know that the Microsoft releases definition updates several times a day to update the new threats that arise. But what about an automatic by WSUS which is official method?? I hope that you members might have understood what I exactly want to say.?! Please provide some help accordingly.

  2. #2
    Join Date
    Nov 2008

    Re: Management Manual updates SCCM

    You can update the clients in different ways:
    • Via Microsoft Updates: The client connects to servers to update from Microsoft.
    • Via a network path: You saw in the management strategies and it is possible to create a directory which acts as filing updates. The client then retrieves the definitions manually from this file.
    • Via System Center Configuration Manager or Windows Server Update Services, the administrator deploys and supports the latest massively.
    Each of these methods have an advantage. The update via Microsoft Updates can enable customers disconnected from the network still receive updates of definitions. The use of a road network allows customers do not have Internet access or deployment infrastructure (distribution points ...) access to updates. Finally, the use SCCM or WSUS enables administrators to better control the deployment of definitions. It is possible to use all these methods together.

  3. #3
    Join Date
    Apr 2009

    Re: Management Manual updates SCCM

    According to me, you should deal only the massive deployment methods namely the management of updates to System Center Configuration Manager 2007 and Windows Server Updates Services. You should know that the management system updates SCCM does not really lend itself to the management of updates of definitions. Nevertheless, you should know about the different methods (formal or not) are:
    • Management manual by SCCM
    • Automatic management by WSUS (official method)
    • Automatic management by SCCM (unofficial method)
    One thing you should keep in mind that to accomplish this part, you must have the necessary knowledge in the management of updates through WSUS and SCCM.

  4. #4
    Join Date
    Apr 2009

    Re: Management Manual updates SCCM

    The process of managing updates through System Center Configuration Manager does not lend itself to updating definitions EFF. Indeed, the definition updates are held several times a day. Managing updates via SCCM requires manual operations. This means that the administrator must do the following at least once a day if it wants that its infrastructure is updated. Begin by briefly reviewing the settings of the Configuration Manager infrastructure.
    1. Open the administrative console, pull down the tree Site Database => Website Management => <SITECODE> - <sitename> => Site Settings => Client Agents. Open Agent "Software Update Client Agent". Make sure it is enabled and properly configured to your needs.
    2. Then click on the Component Configuration node. Open the tab "Classifications" and select "Definition Updates".
    3. Click on the tab "Products" and look for the product "Forefront EndPoint Protection 2010". Check the box to enable synchronization of the product.
    4. In the tab "Languages", check that the languages of the clients are checked in order to apply the updates according to the languages of your local.
    5. Then initiate a synchronization. To do this, go into the Site Database tree => Computer Management => Software Updates => Update Repository. Right click and select "Run Synchronization".

  5. #5
    Join Date
    May 2008

    Re: Management Manual updates SCCM

    5. Then initiate a synchronization. To do this, go into the Site Database tree => Computer Management => Software Updates => Update Repository. Right click and select "Run Synchronization"
    There are some steps after synchronization. You can verify that synchronization has taken place successfully by viewing the log file "wsyncmgr.log". Check the following steps :
    1. The updated definition will then appear in the console tree: Site Database => Computer Management => Software Updates => Update Repository => Definition Updates => Microsoft => Forefront EndPoint Protection 2010.
    2. Right click on the update and select "Deploy Software Updates". It is recommended to use lists of updates (Update List).
    3. The wizard opens. This creates the deployment that will target customers. Enter the name of a deployment.
    4. Deployment on the page template, you can choose to use an existing template or create a new one. For my part I will use a template already created for demonstration purposes.
    5. In step Deployment Package, create a new deployment package that will identify the latest definition updates. You need to enter a name and a UNC reference to the package source directory.
    6. Then select the distribution points where you want to deploy the package updates.
    7. On screen Download Location, make sure the option "Download software updates from the Internet" is checked.
    8. In step Schedule, you can schedule the deployment of the update. So you must choose the date of availability but also the end date. This end date is used to force the automatic installation of updates.
    9. Log on to a client; it should display a balloon notification informing them of the availability of an update. Once completed, the update was successfully applied to the Forefront client as you can see in the Updates tab its interface.

  6. #6
    Join Date
    Apr 2010

    Re: Management Manual updates SCCM

    The following method allows to automatically manage updates definitions via Windows Server Update Services using the rules for product approval. This method is the official solution provided by Microsoft to resolve the shortcomings of System Center Configuration Manager 2007. This has its advantages: It is official! But it also has many disadvantages:
    • It does not use System Center Configuration Manager and deploy via the distribution points. Updates are deployed via WSUS server. And management of remote sites is made more difficult.
    • The administrator does not have all the information Reporting (successful installation or not ...) of System Center Configuration Manager.

    1. Open the WSUS administration console and go into the Options node.
    2. Select "Automatic Approvals to open the configuration window of approval rules. Click "New Rule ..." to create a rule.
    3. On the Add Rule, select "When a year update is in. Specific classification" and "When a year update is in. Specific product". Then select Classification Definition Updates and Product Forefront EndPoint Protection 2010. Apply this rule to all computers.
    4. Enter the name of the rule and click OK.
    5. Once added, make sure the rule is checked in the Automatic Approvals screen and click OK.
    6. Also in the options in the WSUS administration console, select Synchronization Schedule. You then choose to synchronize automatically. You can choose the first synchronization and frequency.
    7. Once synchronized, we can observe with a filter that updates have been properly approved definition.
    8. Log onto a client machine and open the Forefront Client EndPoint Protection. Open the Update tab and proceed to update the client. The customer visits the WSUS server and downloads and installs updates that are offered.

Similar Threads

  1. Replies: 4
    Last Post: 06-09-2012, 01:28 PM
  2. SCCM Updates
    By TFIAruggiero in forum Windows Software
    Replies: 3
    Last Post: 21-11-2011, 10:34 PM
  3. SCCM Clients not getting updates from WSUS Server
    By Umedd in forum Server Update Service
    Replies: 2
    Last Post: 12-02-2010, 07:48 AM
  4. Deploying and centralized management of AV updates
    By AMISH in forum Networking & Security
    Replies: 3
    Last Post: 20-11-2009, 03:54 PM
  5. manual updates
    By Rick in forum Windows Update
    Replies: 11
    Last Post: 09-03-2009, 10:03 AM

Tags for this Thread


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
Page generated in 1,660,335,275.00625 seconds with 17 queries