Messages

Hi.

We purchased PatchMyPC a month or so ago, and it is working well for us.  Thanks!!  Some folks think it is working a bit TOO well, in fact, and we have a few users who have presented business cases for why certain software they use needs to be patched only by them, or needs to remain unpatched. 

So we now have a process set up in conjunction with our security team where users can request an exemption from a particular update.  These are very specific cases.  For instance we have one user who has an application that requires an older version of node.js.  I would love to just tell them they need to update their application so that the app is compatible with current patched versions of node.js, but that is not my call. 

If the request is approved (and in this case it was) I need to exclude just that one person from getting updates to just one program (node.js).  I still want them to receive all of the other applicable 3rd party updates available through PatchMyPC. 

What is the best way to do this?

Cheers,

Dan

Hi.

We are seeing an odd behavior with our 3rd-party application updates.  They show up both in the Software Center and in Windows Update, which is fine.  But if I try to run the updates from Windows Update they give the error shown in the attached image.

If I run them from Software Center, they install properly.  The Software Center image shows the same updates, only with one of them (PowerBI) not shown any more after being installed properly through the Software Center. 

When I go back to Windows Update the PowerBI update does not show up anymore after being installed Software Center, so it is recognizing that the update is no longer needed.  Its odd, though, that it fails when I try to install them from Windows Updates.  I tested this on 4 different machines, and all exhibited the same behavior.

Any idea why this might be?

Cheers,

Dan

Hi.

I recently purchased Patch My Pc, and was able to get everything working pretty easily.  We were planning on only installing updates for a small group to start, though, and it seems like the 3rd party updates are going to more machines than they should.

Here is what I have done:

1. Installed the Patch My PC Publishing Service
2. Configured it with the catalog URL and a self-signed cert
3. Attached to the DB to find products, and selected to publish only those that were found in our environment
4. Ran an initial sync
5. Went into SCCM Configuration Manager.  The Patch My PC updates appeared.
6. Created a Device Collection called 3rd Party Updates
7. Placed only a few machines in that collection
8. Created a new Automatic Deployment Rule called PatchMyPC
9. Set the rule to include updates from the PatchMyPC vendor
10. Deployed that group to the 3rd Party Updates Collection

Today, though, I am seeing machines that are not in the 3rd Party Updates collection receiving updates.  We are not ready to just have 3rd party updates dumped out to all our users! 

Are these updates being published some other way that is going around the SCCM deployment rules?

Thanks for any help you can give on this,

Dan