Introduction to software updates in configuration manager

Because of the changing nature of technology and the continual appearance of new security threats, effective software update management requires consistent and continual attention. Software updates synchronization in Configuration Manager uses Microsoft Update to retrieve software updates metadata. The top-level site synchronizes with Microsoft Update on a predetermined schedule or when you manually start synchronization from the Configuration Manager console.

When Configuration Manager finishes software updates synchronization at the top-level site, software updates synchronization starts at child sites if they exist. When synchronization is complete at each primary site or secondary site, a site-wide policy is created that provides client computers with the location of the software update points. After the client receives the policy, the client starts a scan for software updates compliance and writes the information to Windows Management Instrumentation WMI.

The compliance information is then sent to the management point. From there, the information is sent to the site server. For each software update, a state message is created that contains the compliance state for the update.

The state messages are sent in bulk to the management point and then to the site server. Subsequent reports contain only delta inventory information. The site server processes delta information in the order received. If delta information for a client is missing, the site server rejects further delta information and directs the client to run a full inventory. Configuration Manager can discover dual-boot computers but only returns inventory information from the operating system that's active at the time of inventory.

Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No. The admin continues to monitor and report on software update compliance to ensure that the clients in his environment are within acceptable compliance levels.

After the first month that our ConfigMgr Admin deploys software updates, the admin performs steps three through six to deploy the monthly security software updates released by Microsoft. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode.

Please rate your experience Yes No. Any additional feedback? Submit and view feedback for This product This page. View all page feedback. In this article. Introduction to software updates. Plan for software updates. This information helps you to plan for capacity considerations, determine the software update point infrastructure, software update point installation, synchronization settings, and client settings for software updates. Configure software updates.

This information helps you to install and configure software update points in your hierarchy and helps to configure and synchronize software updates. In this scenario, our ConfigMgr Admin configures the software updates synchronization schedule to occur on the second Wednesday of each month to ensure that they retrieve the latest security software updates from Microsoft.

Synchronize software updates. ConfigMgr Administrator adds all of the filtered software updates to a new software update group with the following requirements: Name : Compliance Group - Microsoft Security Updates Description : Software updates.

Add software updates to an update group.