Menu
CCMEXEC.COM – Enterprise Mobility
  • Home
  • General
  • Configuration Manager
  • Windows 10
  • Intune
  • GitHub
  • Windows 11
  • About the author
CCMEXEC.COM – Enterprise Mobility

FEP 2010 Update Rollup 1 – SoftwareUpdateAutomation

Posted on August 4, 2011November 23, 2011 by Jörgen Nilsson

After 4 weeks’ vacation I started working again and the first thing I planned to do was to implement the new feature in FEP 2010 Update Rollup 1 for automating approval of FEP 2010 definition updates in SCCM instead of doing it separately in WSUS on the SCCM server as many of us do today.

UPDATE:! ——————————————————
A new version of the SoftwareUpdateAutomationtool.exe has been released it can be downloaded here: http://www.microsoft.com/download/en/details.aspx?id=26613
When using this updated tool the challenges with the original version has been solved, the command line below in the .cmd file using the new version used should be:
“e:\program files (x86)\Microsoft Configuration Manager\AdminUI\bin\SoftwareUpdateAutomation.exe” /AssignmentName FEP2010SignatureUpdates /PackageName FEP2010Signature

The rest of this article is still valid.

——————————————————————

I found that the documentation was not that clear and that included using a Scheduled task which I cannot simply use when we have Status Filter Rules in SCCM which is so cool 😉

The guide on Technet describes how to create the necessary Software Update packages and copy the softwareupdateautomation.exe file to the correct location so I will not go into detail about that. You can find the installation instructions here: http://technet.microsoft.com/en-us/library/hh297450.aspx

This is what I ended up doing to get it to work:

1. Follow the instructions on the Technet article until it is time to create the Schedule task.

2. Then copy the softwareupdateautomation.exe as described to the correct location(it must be executed from the AdminUI\Bin directory:
%ProgramFiles%\Microsoft Configuration Manager\AdminUI\bin, if the computer is a 32-bit operating system.
%ProgramFiles(x86)%\Microsoft Configuration Manager\AdminUI\bin, if the computer is a 64-bit operating system.

3. Then I created a simple .cmd file which I placed in a directory on the SCCM Primary Site server, E:\sccmtools.
I run all my status filter rules script from the same location. It is really easy to test that the command line works, just execute it with Admin privileges and check the SoftwareUpdateAutomation.log file for status information. The log file can be found here:
%ProgramData%\SoftwareUpdateAutomation.log.

4. The following command was the one I used in the .cmd file, replace the AssignmentName and PackaegName to reflect your environment:

"e:\program files (x86)\Microsoft Configuration Manager\AdminUI\bin\SoftwareUpdateAutomation.exe" /AssignmentName FEP2010SignatureUpdates /PackageName FEP2010Signature /UpdateFilter "articleid='2461484' AND IsSuperseded=0 AND IsEnabled=1 AND IsExpired=0" /refreshdp

5. Then I created a Status filter rule on the Primary SCCM Site Server which looks like this:

FEPUA1
FEPUA2

6. Using this status filter rule the SoftwareUpdateAutomation.exe will be triggered each time the WSUS Sync Manager reports that synchronization is completed. No schedule task needed!

7. Change your FEP policies to use the new update option below and you are good to go:

FEPUA3

The command line took a while to get to work as the documentation is not correct on the Technet webpage as I am writing this at least.
Also the help information for the softwareupdateautomation.exe tool states that /refreshdp is default true but it is not so /refreshdp must be used.
I strongly recommend reading this article with some other known errors.

http://blogs.technet.com/b/clientsecurity/archive/2011/07/18/errors-when-using-the-fep-2010-definition-update-automation-tool.aspx

  • FEP 2010
  • 3 thoughts on “FEP 2010 Update Rollup 1 – SoftwareUpdateAutomation”

    1. jimbo0607 says:
      October 17, 2011 at 3:43 pm

      This was a great help as the task scheduled event described by Microsoft did not work.

      Thanks again,

      Jim

      Reply
    2. Jörgen Nilsson says:
      October 18, 2011 at 9:12 pm

      Hi,
      Nice to hear that it worked!

      /Jörgen

      Reply
    3. kevin says:
      December 1, 2011 at 9:55 pm

      Hi, i get this error? any ideas thanks.
      D:\Tools>”D:\program files (x86)\Microsoft Configuration Manager\AdminUI\bin\Sof
      twareUpdateAutomation.exe” /AssignmentName FEPDefs /PackageName FEPDefs /UpdateF
      ilter “articleid=’2461484′ AND IsSuperseded=0 AND IsEnabled=1 AND IsExpired=0″ /
      Verbose
      Values:
      /Help: Default (False)
      /SiteServer: Default (SCCMSS)
      /UpdateFilter: Explicit (articleid=’2461484′ AND IsSuperseded=0 AND IsEnabled=1
      AND IsExpired=0)
      /AssignmentName: Explicit (FEPDefs)
      /PackageName: Explicit (FEPDefs)
      /PreDownloadFolder: Default ()
      /UpdateLanguages: Default (0)
      /DisableRefreshDP: Default (False)
      /Verbose: Explicit (True)

      SoftwareUpdateAutomation execution starting.
      ============================================
      Version: 2.1.1116.101
      Additional logging detail is enabled.
      Command line: SiteServerName: SCCMSS; SoftwareUpdateFilter: articleid=’2461484′
      AND IsSuperseded=0 AND IsEnabled=1 AND IsExpired=0; PackageName: FEPDefs; Update
      Languages: 0; SoftwareUpdateFolder: ; DisableRefreshDP: False; LogFile: C:\Progr
      amData\SoftwareUpdateAutomation.log. UpdateAssignmentName: FEPDefs
      Attempting to connect to site server ‘SCCMSS’…
      Connected to site server ‘SCCMSS’, searching for matching software updates…
      Executing select query: ‘SELECT * FROM SMS_SoftwareUpdate WHERE articleid=’24614
      84′ AND IsSuperseded=0 AND IsEnabled=1 AND IsExpired=0’…
      Found software update matching the specified filter: articleid=’2461484’ AND IsS
      uperseded=0 AND IsEnabled=1 AND IsExpired=0.
      Software update: CI_ID: 45490. ArticleID: 2461484. Name: Definition Update f
      or Microsoft Forefront Endpoint Protection 2010 – KB2461484 (Definition 1.117.94
      .0)
      Searching for the specified software update deployment package: ‘FEPDefs’…
      Executing select query: ‘SELECT * FROM SMS_SoftwareUpdatesPackage WHERE Name=’FE
      PDefs”…
      Found software update deployment package SMS_SoftwareUpdatesPackage: PackageID:
      CMP003B1
      Searching for matching software update assignment…
      Executing select query: ‘SELECT * FROM SMS_UpdatesAssignment WHERE AssignmentNam
      e=’FEPDefs”…
      Error: Found no software update assignment with name ‘FEPDefs’.
      SoftwareUpdateAutomation execution completed unsuccessfully, errors occurred.
      =========================================================

      D:\Tools>pause
      Press any key to continue . . .

      Reply

    Leave a Reply Cancel reply

    Your email address will not be published. Required fields are marked *

    This site uses Akismet to reduce spam. Learn how your comment data is processed.

    My name is Jörgen Nilsson and I work as a Senior Consultant at Onevinn in Malmö, Sweden. This is my blog where I will share tips and stuff for my own and everyone elses use on Enterprise Mobility and Windows related topics.
    All code is provided "AS-IS" with no warranties.

    Tweets by ccmexec

    Recent Posts

    • Windows Servicing, Personal Teams and Success.cmd
    • Windows MDM Security Baseline – Settings Catalog
    • Configuring MS Edge Security Baseline v107 using Settings Catalog
    • Configuring Desktop App Installer using CSP and script?!
    • Customizing Taskbar and Start in Windows 11 22h2 with PowerShell

    ©2023 CCMEXEC.COM – Enterprise Mobility | WordPress Theme by Superb Themes
    This website uses cookies to improve your experience. We'll assume you're ok with this, but you can opt-out if you wish.Accept Reject Read More
    Privacy & Cookies Policy

    Privacy Overview

    This website uses cookies to improve your experience while you navigate through the website. Out of these, the cookies that are categorized as necessary are stored on your browser as they are essential for the working of basic functionalities of the website. We also use third-party cookies that help us analyze and understand how you use this website. These cookies will be stored in your browser only with your consent. You also have the option to opt-out of these cookies. But opting out of some of these cookies may affect your browsing experience.
    Necessary
    Always Enabled
    Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
    Non-necessary
    Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.
    SAVE & ACCEPT