Ask a questionAsk a question
 

AnswerClarification on SP2 upgrade with WSUS 3.0 SP2

  • Tuesday, November 03, 2009 7:37 PMnickmo Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    In researching all the unstated items to be upgraded along with SP2 for SCCM, I've found that SP2 (for WSUS 3.0) is needed to support software update distribution to Win7 and Server 2k8r2.  According to the release notes for WSUS SP2, a new version of the Windows Update Agent is included and necessary for the older operating systems. 

    The question becomes how the WUA upgrade is delivered.  Does the SCCM client upgrade automatically do it?  Does a normally schedule software updates scan automatically do it?  Or is not done automatically at all?

    Personally, I hope the agent is not automatically updated at all (except when done by an admin using standard software distribution) since we need to maintain strict change control on our systems.


    Nick Moseley - SCCM Admin http://t3chn1ck.wordpress.com

Answers

  • Wednesday, November 04, 2009 3:30 AMJason SandysMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    1. Yes. The repository is WSUS version agnostic, but you will have issues updating 7 and 2k8R2 systems without WSUS SP2.
    2. There are bug fixes and other improvements in general in SP2 and it is a recommended update by Microsoft whether or not you are updating 7 or 2k8R2.
    3. See 1 and 2.
    4. The WUA is backwards compatible, so yes.

    Your approach is reasonable. I recommend not putting off the WSUS SP2 update too long.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    • Proposed As Answer byReddy Surendar Wednesday, November 04, 2009 7:50 AM
    • Marked As Answer bynickmo Wednesday, November 04, 2009 3:25 PM
    •  
  • Tuesday, November 03, 2009 8:02 PMJason SandysMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    The Windows Update Agent (WUA) is not part of ConfigMgr and thus ConfigMgr does not automatically particiapte in updating it. It is part of the WSUS echo system however and thus WSUS itself will automatically push the updated agent to clients. In larger environments this could cause bandwidth issues as this update is not scheduled or constrained in any way; a good recommendation is to deploy the latest WUA using software distribution before upgrading to WSUS 3.0 SP2.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    • Marked As Answer bynickmo Wednesday, November 04, 2009 3:25 PM
    •  

All Replies

  • Tuesday, November 03, 2009 8:02 PMJason SandysMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    The Windows Update Agent (WUA) is not part of ConfigMgr and thus ConfigMgr does not automatically particiapte in updating it. It is part of the WSUS echo system however and thus WSUS itself will automatically push the updated agent to clients. In larger environments this could cause bandwidth issues as this update is not scheduled or constrained in any way; a good recommendation is to deploy the latest WUA using software distribution before upgrading to WSUS 3.0 SP2.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    • Marked As Answer bynickmo Wednesday, November 04, 2009 3:25 PM
    •  
  • Tuesday, November 03, 2009 9:18 PMSteveMc76 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    A few additional Questions -

    1. Is WSUS SP2 required to patch Windows 7? This is what I am reading here, however I see Windows 7 updates in my update repository and I am still on CM SP1, WSUS SP1. If it is not necessary I do not want to mess with it.
    2. I want to upgrade CM from SP1 to SP2. I at this point only have XPSP3, 2003, and 2008 (non R2) clients. I am assuming there is no need to upgrade WSUS at this point and that after the upgrade all clients will continue to scan against the SUP and install updates jut as normal (obviously very critical).
    3. It is at the point that I want to start deploying Windows 7 and 2008 R2 clients that I will need to upgraded WSUS to SP2 - correct.
    4. If I was to update the WUA on all clients to 7.4.7600.226 ahead of time will the continue to function with WSUS SP1, my initial quick test leads me to believe that this is a non issue, just looking for additional opinions.

    So my road map for a complete CM and WSUS upgrade would be -

    • Upgrade CM to SP2
    • Upgrade all CM client to SP2
    • At this point I must still be patching
    • Upgrade all WUA agents to 7.4.7600.226
    • Upgrade WSUS to SP2

    Does that look reasonable?

    thanks
  • Wednesday, November 04, 2009 3:30 AMJason SandysMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    1. Yes. The repository is WSUS version agnostic, but you will have issues updating 7 and 2k8R2 systems without WSUS SP2.
    2. There are bug fixes and other improvements in general in SP2 and it is a recommended update by Microsoft whether or not you are updating 7 or 2k8R2.
    3. See 1 and 2.
    4. The WUA is backwards compatible, so yes.

    Your approach is reasonable. I recommend not putting off the WSUS SP2 update too long.
    Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
    • Proposed As Answer byReddy Surendar Wednesday, November 04, 2009 7:50 AM
    • Marked As Answer bynickmo Wednesday, November 04, 2009 3:25 PM
    •  
  • Wednesday, November 04, 2009 2:41 PMSteveMc76 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thank you very much for your reply Jason.