Microsoft Security | Intune | Configuration Manager | Other
Other Configuration Manager-related features and issues
I would suggest reading over the docs. https://learn.microsoft.com/en-us/mem/configmgr/sum/
MCM deploy software update package and Software Evaluation
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 15%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAC%3C/text%3E%3C/svg%3E)
Andy Chong
892
Reputation points
Hi,
We use the MCM create a software update package to deploy the software update to client machine. The update will deploy immediately and we can check the deployment status in monitoring
In MCM client setting - software update, it have option "software deployment evaluation schedule" to check the client up-to-date.
What is this option purpose? Do it check other patch need to install but we also need to create package to deploy update?
Microsoft Security | Intune | Configuration Manager | Other
{count} votes
-
Marius Ene 345 Reputation points2024-01-05T23:27:18.3166667+00:00 Hi Chong,
That setting basically triggers the SCCM client to perform a check to verify if it has any updates that were assigned to that machine. If it has, based on your client configuration settings, it should normally download and deploy the updates when scheduled or possible. Note that you can have configured some Maintenance Windows during which you might want those updates (or applications) to be deployed.
If you are interested to execute that process using a script, there is a cool method you can call from the client: Software Updates Assignments Evaluation Cycle {00000000-0000-0000-0000-000000000108}
Invoke-CimMethod -Namespace 'root\CCM' -ClassName SMS_Client -MethodName TriggerSchedule -Arguments @{sScheduleID='{00000000-0000-0000-0000-000000000108}'}Good luck!
-
Andy Chong 892 Reputation points
2024-01-06T01:08:47.8333333+00:00 Hi Marius,
“it should normally download and deploy the updates when scheduled or possible”
The system only will download and deploy the updates which I created the package already?
-
Marius Ene 345 Reputation points
2024-01-06T01:13:48.4433333+00:00 Yes, that's right. Only the updates that you added to your SCCM update packages and deployed to your Distribution Points, and assigned to a Device Collection that includes those particular computers.
Cheers!
Sign in to comment
1 answer
Sort by: Most helpful
-
Garth Jones 1,666 Reputation points2024-01-05T12:37:18.3466667+00:00 -
Andy Chong 892 Reputation points
2024-01-05T17:16:26.96+00:00 As my understand, the evaluation will scan the client and inform the MCM server installed required patch or not. If the patch didn’t install, it will get the patch form DP to get the “required” update (poll).
But I am confuse that as we deploy the update with schedule ASAP to “push” the package to client to enforce it install immediately.
If I assume all patch in the package install correctly, in this case, do the evaluation on client still will get any update form DP?
on the other hand, the evaluation scan just will get update which the package is configured with schedule not ASAP?
Sign in to comment -