A customer contacted me the other day because their Office 365 client updates were not released to clients in a timely fashion.
Their configuration was one Automatic Deployment Rule (ADR) for all client updates, with the following configuration:
- Date Released or Revised last 1 day
- Office 365 client updates enabled
- Evaluation schedule: Every Second Tuesday at 23:55
This is a fine setup except for the following scenarios:
- Out of band patches are not included
- Windows Defender Definitions in Configuration Manager will not be up to date as they are released more frequently
Software Updates released by Microsoft are generally released on Patch Tuesday, which occurs every Second Tuesday of each month at 10 AM Los Angeles time.
Living in Sweden, this should be around 7 PM.
Looking at the Windows Updates, we can see that all of them were released at 7 PM.
Office 365 Client Updates however, do not follow this timing, as you can see in the below picture:
The effect of the configuration was that the latest Office 365 patches were not included when the ADR was evaluated.
There are a number of ways to handle this.
- Increase the evaluation frequency of your Automatic Deployment Rule, if you are only using one to handle client updates.
- Create a separate Automatic Deployment Rule for Office 365 Client Updates.
For more information about the issues regarding timezones and ADRs, please refer to the following link: https://blogs.technet.microsoft.com/scott/2016/08/10/scheduling-software-updates-to-run-on-patch-tuesday/
Updates related to Automatic Deployment Rules in System Center Configuration Manager Technical Preview 1801: https://docs.microsoft.com/en-us/sccm/core/get-started/capabilities-in-technical-preview-1801
- How To Install .NET Framework 3.5 on Windows Server 2012, Windows Server 2016 and Windows 10 968,507 views
- Issue with mounting new ISO files from TechNet in Windows 8 and Windows 8.1 Preview 63,986 views
- Solve SCCM Error “sending with winhttp failed; 80072ee7” in Windows PE 31,935 views
- Powershell: Script to set Outlook 2010/2013 signature using information populated from Active Directory 32,304 views
- How To Enable PXE in Hyper-V for Legacy Boot 109,458 views
- How to force specific sites to always run in Compatibility View using Group Policy 145,167 views
- How to change between a Full Installation (GUI) and Server Core in Windows Server 2012 64,345 views
- How To Solve WDS Issue with DHCP Port Conflict 12,350 views
- Hyper-V: Issue when starting virtual machine from downloaded ISO file 7,553 views
- How To Check Bitlocker Status using the Command Line 120,122 views
About the author
Daniel Classon works as a Senior Consultant at Mansoft, focusing on Microsoft Configuration Manager, Windows 10 and Powershell
What are Intel Modern Drivers for Graphics? https://t.co/h2d2GJOyJY #ConfigMgr
New blog post: How to deploy HP BIOS settings using SCCM and Powershell: https://t.co/JVKHBN86pN #sccm #configmgr #PowerShell
@miketerrill On topic of this, this might help with the initial clearing! https://t.co/2NnFlDU6lm @SCConfigMgr @modaly_it thank you for sharing
Friday #WaaS Tip: Record full Build Number Key during IPU. Helps support teams know which patch level was installed at time of upgrade to help correlate if any upgrade issues correspond to a specific patch level of the upgrade build. Blog Post Update coming soon (SetOSDinfo)3