MS SCCM 2012 Windows patches

Hello All,

I'm currently reviewing the patch management process and it seems like a lot of the work involves SCCM. Currently, we identified unpatched servers using the compliance 6 reports. We entered the patch update ID number where the state name: Update is required. The patches were required and approved but not installed. The reason is that the servers identified do not belong to any server patch groups. In other words, to receive the patch updates, the servers should belong to a patch group. My question now is how do we scan the network using SCCM 2012 for any server that doesn't belong to a patch group? Does SCCM have built in functionality to do a scan for servers? Please let me know if you need clarification.

Thanks All!

Find more posts tagged with

Comments

PCTechLinc

We have a query-based collection for servers, since we have them in different OUs based on their functions:

System Resource.Operating System Name and Version is like "%Server%"
or
System Resource.System OU Name is like "%Server%"

I've created other query-based collections based on specific version number, such as Windows 10 1607 and 1709.

anthonx

PCTechLinc wrote: »

We have a query-based collection for servers, since we have them in different OUs based on their functions:

System Resource.Operating System Name and Version is like "%Server%"
or
System Resource.System OU Name is like "%Server%"

I've created other query-based collections based on specific version number, such as Windows 10 1607 and 1709.

Hi PCTechLinc,

Do you mean, you have to create and run a script in SCCM? What about built-in functionalities? Nothing too complex, just wanted to find out what's available in SCCM report or monitoring tools. BTW, any good materials or blogs you can share? Like links to good websites. Thanks for your reply!

PCTechLinc

No, not scripts. In SCCM, when you create a collection, you can either do a Direct Membership where you put an object's name, or you can make a query-based rule. The query-based uses built-in WMI queries.

I learned this because the person that was assigned to managed our SCCM 2012 infrastructure got a promotion and left our location, and I took a look at the existing collections she created. SCCM is definitely the weakest area of my skills, so it's been a lot of trial-by-error. We've had a ton of deadlines lately, so I haven't had a lot of time to do independent research, so I'm not sure what materials to use.

My go-to resources are Skillport and Safari Books Online, because I have free subscriptions through my school.