SCCM auto install certain KB for devices?

Question

Dear Experts,

In our production, we have some machines running Windows 11 but quite a half of the rest are running Windows 10.
We need to apply one certain KB for the devices with Windows 11. We also use WSUS in our env at this stage.

Is it possible to add this KB as an Update (shown in software center) or an application, so it filters the devices and install to the devices with Windows 11 only?
We don't want to touch device with Windows 10.
This KB was not auto-installed via WSUS, I'm referring to kb5008295 which is aim to fix Snipping tool issue in Windows 11.

Any idea would be really helpful! Thanks a lot!

Answer 1

yes you can do that use adr. https://learn.microsoft.com/en-us/mem/configmgr/sum/deploy-use/automatically-deploy-software-updates

Answer 2

Hi @Eaven HUANG ,

1, Is the update in the link what you want to deploy?
Microsoft Update Catalog

If so, this update will automatically sync with WSUS if you configure Products and Classifications as follows:

Product: Windows 11

Classification: Security Updates

The links for your reference:
November 5, 2021—KB5008295 Out-of-band - Microsoft Support
November 5, 2021—KB5008295 Out-of-band - Microsoft Support

2, If you want to deploy it via ADR and you just want to deploy it for win 11 clients. I recommended that you could create a collection that just contain Win11 client and then you can deploy it just to the Win11 client.
The screenshot for your reference:

> if we created the ADR, will the updates be synchronized from our in-place WSUS?

3, One of the prerequisites while installing SCCM is WSUS role installation. The software update point (SUP) site system role must be installed on a server that has WSUS role installed.
This article for your reference:
How to Install WSUS for SCCM | SUP Role | ConfigMgr (prajwaldesai.com)
Note: Microsoft provides third-party contact information to help you understand the problem. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

4, For more information about how to Create an ADR In SCCM, we can refer to this link:
Create Automatic Deployment Rule In SCCM (prajwaldesai.com)
Note: Microsoft provides third-party contact information to help you understand the problem. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

If I misunderstand something, please free let me know.

Thank you for your time and patience!

Best regards,
Cherry

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.