Controlling which machines get updates

[dnewland]

Hi.

I recently purchased Patch My Pc, and was able to get everything working pretty easily.  We were planning on only installing updates for a small group to start, though, and it seems like the 3rd party updates are going to more machines than they should.

Here is what I have done:

1. Installed the Patch My PC Publishing Service
2. Configured it with the catalog URL and a self-signed cert
3. Attached to the DB to find products, and selected to publish only those that were found in our environment
4. Ran an initial sync
5. Went into SCCM Configuration Manager.  The Patch My PC updates appeared.
6. Created a Device Collection called 3rd Party Updates
7. Placed only a few machines in that collection
8. Created a new Automatic Deployment Rule called PatchMyPC
9. Set the rule to include updates from the PatchMyPC vendor
10. Deployed that group to the 3rd Party Updates Collection

Today, though, I am seeing machines that are not in the 3rd Party Updates collection receiving updates.  We are not ready to just have 3rd party updates dumped out to all our users! 

Are these updates being published some other way that is going around the SCCM deployment rules?

Thanks for any help you can give on this,

Dan

[Justin Chalfant (Patch My PC)]

Hey Dan,

Followed up via the email you sent.