SOLVED Can u please tell me software updates maintenance windows

[Manoj P]

hi
can please tell me difference between collection maintenance window and sup maintenance windows,
and in sup maintenance window what is the difference between software update available time and deadline.

 

[Peter Lüssem]

Hi


In my SCCM environment I have create 3 Folder structure for collection ( see Collection.jpg)

1. Adminstrative Organisation: In this structure all the Server Teams responsible can create there own collection.

2. Maintenance Window: Managed by SCCM Fulladmins. The Teams can add their collection to the maintenance Window collection.

3.Patchdeployment: The Teams can add their collection to Pilot or Prod Collection. But: The referend Collection for the collection in The Patchdeplomant folder is: Only Collections with Maintenance Window!

!!This ensures that only servers are patched with maintenance window!!


The different between available time and deadline:

For example:

You have create an ADR with Patchday Mircosoft ( MS Patchday is every second Thuesday of the month)


You want that the software updates 2 hours after download for installation on your servers is available. Then 2 hours later it will display in Software Center but the installation will not start automaticly.


The Installation Deadline means: If the deadline is reached (for example, 8 days later) The installation is now mandatory and the installation start automaticly on the deployed systems.


BUT: Maintenance Windows has highest priority


For example: available-> 2 hours later

deadline-> 8 day later 11 p.m

deadline reached: installation start automaticly



deadline reached / collection have maintenance window on the following weekend!

the installation starts at the defined date of the maintenance window

 

[Manoj P]

Hi Peter,
Thanks it is so useful to me,

example in real time environment

client asks need to patches install and reboot systems july 3rd week Friday evening 6pm to 9pm only
can you please suggestion what is the best time windowsSoftware Available time and dead line and maintenance window time like).



Thanks
Manoj P

 

[Peter Lüssem]

Hi Manoj P,

In my opinion there are three importend steps for Patchmanagement with SCCM.
But you have to find the best way for yourself!

1. monthly every 2nd Tuesday Microsoft Patchday.
Create an ADR (automatic deployment rule) and deploy to Test / Pilot Collection.
insatallation during the next Maintenance Window for Test / Pilot Systems.
Example: Patchday MS -> on the following weekend it will be automatically installed!

So I set the available time 2 hour later.
so you can see the available updates in Software Center on the client/ server.
Deadline is 2 day later. But the Maintenance Window has the higher priority! So the installation will start at your defined time!



2. control / monitoring / behaivor the installation of Microsoft Patches on test and pilot systems
It is important test / pilot and not to patch production simultaneously
The test phase lasts for minimum 2 weeks!


3. After timeline testing
1. no failure: release to production ( create a Maintenance Window for Prod. Systems)
2. failure: to solve / then release to production
insatallation during the next Maintenance Window for Production

I'll put my process chain available. I hope it will help you a good bit more to find the right way for you with SCCM patchmanagement!

Best regards

Peter

 

[Manoj P]

Resolved.

 

[Peter Lüssem]

Resolved