SOLVED SCCM/WSUS Windows Updates on VPN clients

[JoeCool]

I'm sure this has been discussed before and has lots of interest now that we're managing a lot more remote clients. We're getting complaints from security that these remote clients are not getting their Windows updates while connected to VPN. The VPN IP range would fall into our boundary groups in SCCM. Is there a way to configure SCCM clients to fall back to obtaining updates from Windows update if they aren't getting them timely from SCCM?

Thanks,
Joe

 

[Prajwal Desai]

You must examine the logs on the client machines to find out why the updates aren't downloaded.
The clients can download the content from Microsoft update if they don't find it on DP or if they cannot reach the DP. You have to explicitly enable this option while deploying the updates.

 

[Prajwal Desai]

You can refer to the following guides :-

Deploy software updates using SCCM - https://www.prajwaldesai.com/deploy-software-updates-using-sccm/
Software Update Log files - https://www.prajwal.org/sccm-software-updates-log-files/

 

[JoeCool]

Ah, thanks for that. So yes, the option "If software updates are not available..download from Microsoft Updates" is checked in the deployment. So, I'm going to need to have the desktop/security teams identify a client that isn't updating, and review their CCM logs to see why they aren't updating.

 

[Prajwal Desai]

Ok after you examine the log files, let us know and update this thread.