In the previous article i have explained step by step Install SUP in MECM server with its benefits and requirements. In this article i will be explaining configuration of Software Update Point and how to synchronized with Microsoft Update.
As i have already explained in the previous articles, MECM itself do not stores update by itself but rely on WSUS service for sync updates metadata. Once metadata syncs with Microsoft update, distribution points will use it to deploy the updates.
One more thing which need to be mentioned, after synchronizing metadata from Microsoft to MECM server it also scans client computer as per computer to updates synced updates. IT show compliance percentage if computer or updates required by computer.
To configure SUP, Open Configuration Management Console -> Overview -> Site Configuration -> Sites -> Select the site name and right click -> Configure Site Components -> Software Update Point.
There are lots of options in component. Go to Sync Settings -> choose Synchronization from Microsoft Update
There another option which need to configure to be alerted when any issue occurs this should notify use regarding the synchronization. In this article i don’t not want to create any alert so i will select “Do not create WSUS reporting events”.
On Update Files Tab, Express installation files provide smaller download faster installation on computer because only the necessary files are downloaded and installed.
i will choose “Download both full files for all approved updates and express installation files for windows 10 or later.”
On Classifications Tab, In this tab we need to select the classes which things should be included in sync meta data from Microsoft Update. I will select Critical Updates, Security Updates, Tools, Update Rollups, Updates and Upgrades.
On Superdense Rules, most of updates superseded by its latest updates, it is best practice to configure expire those updates which are overridden by recently updates which keeps clean and informative console and administrator can devices which updates need to installed in the computer or not. In this instance will configure expire all those updates which are overridden by its recent updates. which mark as expired and administrator can install latest required update only.
check “Immediate expire a superseded software updates” and “Immediate expire superseded feature updates” and Next.
All the required setting which are required to be changes are done. now its time synchronize MECM server with WSUS to reflect metadata in the mecm console.
Go to Software Library -> Overview -> Software Updates -> All Software Updates and click on Synchronize Software Updates. A popup appear for asking Run Synchronization click on Yes.
wait few minutes of you want to check updates via logs. to check via logs go to Configuration Manager -> Logs -> wsyncmar.log. This should show starting synchronization. as this is first time this is being run, It may take couple of hours to for complete synchronization.
To monitor percentage of synchronization, Open WSUS -> server -> Synchronizations -> there should be a running synchronization under WSUS.
List of update being processed.
after synchronization is done in log. within 5 minutes updates should start reflecting in MECM console. after showing all the updates in console server will rescans the client computer against updates for compliance and required updates.
In this article i have explained details why and how to synchronize WSUS and MECM. In the Next article i will be explaining step by step Installation and configuration of reporting and its service point in MECM server. Where I will be explaining the importance of reporting and service point.
