1,128 questions
The new creation of border groups and changing the WSUS configuration file helped.
SCCM VPN Client update
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(291.2, 13%, 38%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EPM%3C/text%3E%3C/svg%3E)
pasha-mayerov
156
Reputation points
Hello.
Structure: SCCM 2010
Primary site (local client) Management point, Distribution point
Site system server: Data base
Site system server(vpn client):Management point, Distribution point, Software update point.
In vpn boundaries, the range of vpn clients is specified.+ vpn border group.
Boundary groups setting:
References: site system server- Site system server(vpn client)
Relationship: Default-Site-Boundary-Group - DP - 120(install app, no updates uploaded to DP), SUP - Never
Options - enabled Prefer cloud based sources over on-premises sources
Client log:
CAS.log no data available
ContentTransferManager.log no data available
how can I force updates via MS servers?
Microsoft Security | Intune | Configuration Manager | Updates
Accepted answer
2 additional answers
Sort by: Most helpful
-
Rahul Jindal [MVP] 10,911 Reputation points MVP2021-03-23T21:30:58.363+00:00 Are you looking to use MS CDN servers to provide patch content for MS products? If yes, then just ensure you only select ‘Install over internet using Microsoft Update’ in your deployment assignments and don’t allow download of content from your local DPs. Your boundary group config seems to be accurate for this to work.
-
pasha-mayerov 156 Reputation points
2021-03-23T22:24:05.127+00:00 I don't have a goal to use Azure. The goal is to use SCCM, but the updates were downloaded via the client's Internet. without loading the VPN tunnel.
-
Rahul Jindal [MVP] 10,911 Reputation points MVP
2021-03-23T22:31:43.96+00:00 So you want to ensure that updates don’t get downloaded from internet, is that it? If so, then you just need to make sure that your vpn boundaries are set to use your on-prem site servers, content is on the local DPs and the deployments are configured to download content from local DPs. Remove the option of ‘Prefer could resources over on-prem servers’ from boundary group.
-
pasha-mayerov 156 Reputation points
2021-03-24T07:09:49.84+00:00 My english is bad.
There are users who work from home and they connect via vpn to the work network. I want to update them using SCCM. The task comes from the SCCM website, the client downloads updates from microsoft.
I tried this way:
https://www.terminalworks.com/blog/post/2020/05/17/deploy-windows-updates-through-internet-using-sccm-work-from-home-scenario -
Rahul Jindal [MVP] 10,911 Reputation points MVP
2021-03-24T08:02:36.26+00:00 I am sorry but I still don’t understand what the issue here is. Do you want the endpoints to download updates from Microsoft servers or not? What is not working for you? If this is urgent for you then maybe opening a case with MS and requesting for regional level support may help you.
-
pasha-mayerov 156 Reputation points
2021-03-24T12:19:29.61+00:00 I want the client to download updates from Microsoft Update
Sign in to comment -
-
Amandayou-MSFT 11,156 Reputation points2021-03-24T07:06:15.787+00:00 Hi @pasha-mayerov ,
Agree with RahulJindal-2267, content is on the local DPs and the deployments are configured to download content from local DPs, we could refer to the following the screenshot to set it:
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.