Video Screencast Help

Software Update Policy - To Schedule or Not To Schedule

Created: 09 Mar 2011 • Updated: 11 Mar 2011 | 4 comments
This issue has been solved. See solution.

That's my question. I've setup several custom (default) software update policies with the appropriate windows and reboot schedules along with targeted computers. When creating a Software Update Policy for deployment, should I schedule a specific future time or leave the scheduling blank and allow the task to fall back on the default software update policy?

My goal is to stage policies and make the computers download the patches and sit waiting for a future deployment/reboot.

thx

Comments 4 CommentsJump to latest comment

mclemson's picture

Neither scheduling option will accomplish your goal, which is to 1) apply policies to computers so that they 2) download the patches ahead of time before they 3) install at a scheduled time and then reboot.

Unless you happen to be running 7.1 already, but that was just released on Monday.  7.1 allows you to tell software to download prior to execution.

Am I understanding correctly that if you apply a patch policy and tell them to install at 2 a.m. on Saturday, that you want them to have everything downloaded and ready to go by Saturday at 2 a.m.?  If so, this is the feature I'm talking about above that's available in 7.1

If I'm not understanding correctly, pleas elet me know what you're looking to do instead.

Mike Clemson, Senior Systems Engineer, ASC
Intuitive Technology Group -- Symantec Platinum Partner
intuitivetech.com

rpleasan's picture

Thanks Mclemson. That's exactly what I wanted. We have alot of computers and as oppose to sending out updates at a specific day and time and bogging down the network, it would be nice to approve and stage patches for a Thrusday download and allow the default software update policy window for the following Thursday to do the install.

Incidentally, I was reading how others are running their patches and one article read to not set a schedule at all in the SUP - Patch Options section. Simply use the DSUP's window.

gshpakov's picture

Unless you want to install specific patches at specific time.

And in fact Software Update Plug-in should download updates immediately to the client once it receives the policy already in 7.0.

When you see the status "Update scheduled" in the client UI, this means that the package is already prepared and just waiting for the schedule to be installed.

McLemson is probably referring to a new Managed Delivery Policy feature in the version 7.1 that allows to schedule installation of the package separately from the compliance check (and download), but that is not related to Patch.

 

Thanks,

Grigory.

SOLUTION
rpleasan's picture

This is what I wanted to know. I am glad the downloads happen immediately. Thanks guys.