SCCM not pushing SQL updates

Question

SCCM not pushing SQL updates

Andreas 1,331

Hi, We have a SCCM deployment onprem, and have now installed Microsoft Defender for Endpoint on our servers. Within the console to Microsoft Defender for Endpoint, you have a section called Missing KBs. Here we noticed a lot of SQL KBs that have not been installed over the years and not reported by SCCM. For example the image below is from a SQL server that is running SQL server 2019 today, but have been upgraded from SQL2014 earlier, and if we look in the control panel we can see traces, but the server has only one instance running sql 2019 (not sure why SQL keeps 2014, but i guess that is part of the upgrade process) User's image

KBs missing reported by MDE User's image

Within SCCM we have selected the following for product downloads, isn`t that enough and correct settings ? User's image

User's image

Thanks for any reply /R Andreas

1 answer

Your answer

Answer 1

AllenLiu-MSFT 49,436 Microsoft External Staff

Hi, @Andreas

Thank you for posting in Microsoft Q&A forum.

You may need to check if you enable SUP classifications and products correctly.

In the Configuration Manager console, navigate to Administration > Overview > Site Configuration > Sites. Select the site, right click and click Configure Site Components > Software Update Point. User's image

On the Software Update Point component properties box, select Classifications tab. Enable the ones that you require. Make sure you have Security Updates enabled.
User's image

Next, click Products tab and select the products (SQL Server 2014 and 2019).

After you select Classifications and Products, you must run the software update point synchronization again.

By the way, the update KB5014165 and KB5021037 are replaced by KB5029184.

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Andreas 1,331 Reputation points

2024-01-17T07:02:28.59+00:00

Hi @AllenLiu-MSFT Thanks for your reply. I have checked and we have enabled those settings.

One thing that is interesting is that you say update KB5014165 and KB5021037 are replaced by KB5029184. Should not Defender for Endpoint tell me that it is KB5029184 we are missing then ? Might Defender for Endpoint give me wrong information, that the system is compliant but MDE is not "quite following up", if you understand what I mean. Because we have a lot of KBs that i mean we need to install, for example KB5014355 KB5021129 KB5029186 KB5021045

Btw, i cannot see KB5029184 installed on my machine either.

/R Andreas
AllenLiu-MSFT 49,436 Reputation points Microsoft External Staff

2024-01-18T05:59:45.65+00:00

It seems your question is more related to Defender for Endpoint, you may ask in Defender for Endpoint community for a better support:

https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/bd-p/MicrosoftDefenderATP

If you cannot see KB5029184 installed, you may check if the update is show in All Software Updates and is deployed in SCCM console.

Share via

SCCM not pushing SQL updates

1 answer

Your answer