Comments on: Install SCCM Software Update Point Role | ConfigMgr SUP

By: Lars

Lars

Great site, you’ve helped me out on a lot of things. Got an issue though that I’ve been trying to fix for a while.
Have a SCCM server that is version 2207 (Server 2019) Primary site server
Have a WSUS server that is also Server 2019.
About 10 years ago we integrated these 2 servers, they had been completely separate environments until we need to control the client install to only workstations and servers within the domain and then to only ones that windows update was configured to get their updates from the WSUS server. So the WSUS server became an SUP and the SUP role was also installed on the SCCM server. GPO controlled where the clients got their updates from using the WSUS url. This worked great until we needed to deploy office 365 updates from SCCM. Because the updates have to come from the SCCM deployment they don’t play nice when the Set intranet update service value is set to the WSUS server since SCCM is constantly trying to change it to the SCCM server. The updates fail to install with 0x87D00692. If I set the Set intranet update service to not configured then the updates can complete, but then the client is now relying on SCCM server for its updates and for the SCCM client updates. Last week I updated from 2107 to 2207 and found that until I put in the WSUS back in the Set intranet update service the client wouldn’t update, as soon as I did it updated. But then the Office 365 updates didn’t work again. I could point everything to use the SCCM server for updates and client install but then how does the client know to get the SCCM client if it the client is the one setting the parameters for SCCM and the updates?

By: David

David

In reply to Prajwal Desai.

Hi Prajwal,

i think i have the same issue… i just created an Feature Update to Windows 10 21H1 and deployed it to a Computer Collection. The Update only works on Clients connected to the Main DP but on the other DPs its not working. When i create such an Update i do not have the option “distribute Content”… so i cant choose the other DPs.

Can u help me?

Kind Regards

By: Prajwal Desai

Prajwal Desai

In reply to Andres. No, WSUS isn't required for remote DP's. If this is a single primary site, ensure you install WSUS on the main site along with SUP and the updates can be distributed to remote DP's.

By: Andres

Andres

Hello, have 3 remote dp’s in my organization and i would like to know if wsus is required by the remote DP’s to distribute the monthly windows updates to the computers in those locations.

Thank you for your help.

By: LIm

LIm

Mr Prajwal Desai,
Thank for your all blog post regarding SCCM. It is very helpful. But may I know if I want to upgrade my current SCCM server OS 2012 R2 to version server verison 2019. Did I need to also perform upgrade server OS for my WSUS server from 2012 R2 to 2019? Or I can do it later on? Will it have any impact if my SCCM site server is in windows server 2019 and WSUS server is at older version OS?

Your advise is much appliciated.

By: Steve Carneol

Steve Carneol

The question of what Products to select keeps coming up and its sort of like the “Chicken or the egg” conversation right? If you ask Microsoft Support, they recommend only selecting the Products you have in your environment but the only way to know what Products you have in your environment is to select all Products, then scan all of your clients with metadata for all Product updates in order to see what products are Installed and/or Required. Once you have that info, you can deselect those products that are neither Installed or Required. This would be something you would have to do a few times a year to make sure you are patching those Products.

By: Marcin

Marcin

Hi,

Is there any limitations to install SUP for secondary site on separate server (not on Secondary Site Server machine)? I have one SUP in primary site and it works fine. Now I’m trying to install SUP on separated WSUS server in Secondary Site network location but there is only DP and SMP available in System Roles. But on Secondary Site Server any other roles are available including SUP.

By: DM

In reply to Jacob. Sync without any classification again. this is what i did 2 more times, in order to get full list of products.

By: Jacob

Jacob

Hi Prajwal,

Thank you for the brilliant guide !
However at the step with post configuring products to sync, I am missing a lot of products (including Windows 10).
How do I get the full list of Products ?

Kind Regards

By: Shilin

Shilin

Do you have any blog for MBAM deployement on SCCM Server