SCCM 07 - Windows Updates - Rebooting

[guest]

Basically I have relatively new SCCM 2007 setup. I am working on getting the software updates working and for the most part I think I got it down. I created a deployment template and applied it to a certain collection. This collection has a maintenance window set for once a week between the hours of 10:00pm - 6:00am. Now I created a deployment package for this collection with current windows xp critical updates. In the settings of this package I have defined a deadline to install the packages which reflects a date which has already come and gone. I do not have the option checked to "Ignore maintenance windows and install immediately at deadline". On the Restart Settings tab I do not have the option checked to "Allow system restart outside of maintenance windows" My problem seems to be that the machines are still rebooting for some reason. This would be a minor inconvenience but the machines in this collection have a program called Deep Freeze installed on them and this keeps the machines in a 'Frozen State" (just like the windows shared toolkit, but with more options). It appears the machines are getting updates outside of the maintenance window and rebooting, but Deep Freeze removes the changes and the cycle begins all over again. These machines are suppose to wake up (using wake on lan) during the collection maintenance window thawed and apply the updates or at least this is how I want them to work.

There is an option under the "Restart Settings" tab to suppress the system restart on workstations but wouldn't that also mean that during the maintenance window the machines would not reboot after the update is applied? If I dont set a deadline for the updates to install would they still install during the maintenance window?



I also notice that after I logon as the local admin it seems that the local windows update agent is installing updates and wants to reboot??? I thought that the Config Mgr client was going to take control?? I have no GPO in place that would override the local policy...

[guest]

Ok here where updates can be confusing. Your current setup means that the updates will install and restart at the Maint Window. If you want the updates to install and suppress restarts until the window then click the box that says "ignore maint window and install"



If the supress restart is unchecked then the restart will happen at the Maint window. Else it will repress the restart forever. If you don't set a deadline then updates will never force an install. They will wait for the user to click the install button.



One note: Since maint windows are cumualtive they will install at the first maint window. So if you have a window setup at 5pm for Adobe installs and then your 10pm to 6am every day for patch install it will run the install at 5pm. Since the computer is in that window also.



Our Setup:

Suppress on Servers only

"allow system restart outside maint windos" Unchecked

Date/time for install 9/10 11pm "deadline set at 11:15 on 9/10" - This means it will force the install after 11:15pm on all computers no matter when they are turned on.

"Ignore Maint window and install immediatly at deadline" -checked they will install the patch but hold the restart for the workstations till the window.



does this shed light on it or does it just give you more of a headache?