Endpoint Services, SCCM, What is the SCCM Software Updates feature and how to set up?

How to use SCCM to manage Windows Updates on your endpoints.


System Center Configuration Manager (SCCM) Current Branch

Affected Customers

University of Illinois IT Pros leveraging Technology Services Endpoint Service SCCM Current Branch

General Information

SCCM can be used to deploy Windows Updates to endpoints as an alternative to Campus WSUS. IT Pros can request which updates get deployed to which device collections, the schedule on which they run, and their installation behavior. 

Some considerations:

  • As deployments will be configured according to provided criteria, IT Pros will be responsible for monitoring compliance and notifying EPS of any issues. As such, it is recommended that additional deployments to test collections with their own configurations also be requested.
  • While deployed updates can be canceled, they cannot be uninstalled via this feature. When requesting a deployment schedule, consider offsetting update availability/deadlines from the release date. 
  • Any changes to active deployments need to be requested through EPS.

In order to leverage this service the following steps must be taken:

  1. The SCCM client must be installed on targeted endpoints.
  2. Maintenance windows must be configured on the targeted collection/s.
  3. Client Policy must be configured to allow SCCM to manage updates. Under "\Administration\Overview\Client Settings", either create or modify an existing policy and ensure that "Enable software updates on clients" under "Software Updates" is set to "Yes". Configure other settings as desired, then deploy this policy to the target collection/s. 
  4. Targeted endpoints must not be receiving any Group Policy that governs Windows Updates, such as Campus WSUS, as Group Policy supersedes SCCM policy. Please ensure that any conflicting Group Policy is removed or disinherited prior to using this feature.
Once ready, please fill out a SCCM support request for Microsoft/Windows Updates and EPS will work with you on the final steps.

Reporting ("\Monitoring\Overview\Reporting\Reports\Useful Reports") and Monitoring ("\Monitoring\Overview\Deployments") are available for update deployments.

Contact the EPS team

Keywords:EPS, SCCM, Updates, WSUS, SUP   Doc ID:91859
Owner:Evan T.Group:University of Illinois Technology Services
Created:2019-05-20 12:25 CDTUpdated:2019-05-21 09:51 CDT
Sites:University of Illinois Technology Services
Feedback:  0   0