I will configure automatic deployment rules (ADRs) for each product. The ADR will be set up as follows:<\/p>\n
- \n
- Software Available Time: Set this to something like 21 days. That means that SCCM will hold back any applicable update for 3 weeks. That gives Microsoft lots of time to fix an update and the replacement will supersede the dodgy update.<\/li>\n
- Installation Deadline: With this set to 7 days, we have 4 weeks before updates are pushed out \u2026 and that assuming that we haven\u2019t applied maintenance windows to any collections (servers, VMs, call centre PCs, etc) that might further delay the deployment.<\/li>\n<\/ul>\n
![\"image\"](\"https:\/\/aidanfinn.com\/wp-content\/uploads\/2014\/08\/image_thumb9.png\" "\\"image\\"")
<\/a><\/p>\nWith the above configuration, the dodgy August updates would not have been deployed to PCs or servers on your network. Instead, a tested and fixed update will be released, SCCM will sit on it and automatically approve it at a later date.<\/p>\n
BTW, I do a similar thing with Endpoint Protection updates by delaying approval for 4 hours with immediate deployment.<\/p>\n
I don\u2019t know of a method for accomplishing this in Windows Intune \u2013 I\u2019d like to see it. The same goes for WSUS, but a commenter suggested using cmdlets from this site<\/a> for WSUS to write a script; I\u2019d rather see a clean solution from Microsoft similar to what we have in ConfigMgr but less granular.<\/p>\n
Technorati Tags: System Center<\/a>,ConfigMgr<\/a>,Configuration Manager<\/a>,Deployment<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"I know there\u2019s a risk in telling you to delay deploying updates for 1 month. Some think that means switching to manual approval \u2013 and that is an oxymoron because manual approval rarely happens. No; I would rather see large enterprises use a model that automatically deploys updates after delaying them for 1 month, just … Continue reading “Avoiding Microsoft “Fast Fail” Updates Using SCCM 2012\/R2 Automatic Deployment Rules”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"_wpcom_ai_launchpad_first_post":false,"footnotes":""},"categories":[11],"tags":[173,60,174,193],"class_list":["post-16980","post","type-post","status-publish","format-standard","hentry","category-configmgr","tag-configmgr","tag-configuration-manager","tag-deployment","tag-system-center"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t