An update list in Configuration Manager 2007 contains a set of software updates. Using the update list provides several benefits when deploying and monitoring software updates and is, therefore, part of the recommended software updates workflow. The update lists are displayed in System Center Configuration Manager / Site Database / Computer Management / Software Updates / Update Lists. The software updates contained in each update list are displayed by selecting an update list in the Update Lists console tree node. For more information, see Update Lists Home Page.

The following sections provide information about using update lists, how an update list can be used for delegated administration, and how using update lists for deploying software updates provides a better reporting experience for retrieving the compliance state for software updates.

Creating an Update List

You create an update list by selecting one or more software updates, and then initiating the Update List action to open the Update List Wizard. You must have Create rights on the Configuration items class to create an update list. For the step-by-step procedures for creating an update list, see How to Create an Update List.

Adding Software Updates to an Update List

Software updates are added to an update list by using the Update List Wizard. Software updates are selected in the Configuration Manager console and the Update List action is used to open the wizard. You can add the software updates to an existing update list or create a new one. You must have Modify rights on the Configuration items class to add software updates to an update list. For more information about how to add software updates to an update list, see How to Add Software Updates to an Update List.

Delegated Administration

Using an update list provides the ability to delegate the administration for approving and deploying software updates. For example, an administrator at the central site can select the software updates that need to be deployed and add the updates to an update list. Administrators at child sites, with restricted object rights, can then use the update list and deploy the updates in the update list to an appropriate collection.

The following table provides the minimum object class rights for an administrator at a child site when the update list, deployment template, and collection have been created, and when the software updates have been downloaded to a deployment package:

ConfigMgr Object               Read          Distribute    Create        Advertise    

Collection

     *

 

 

     *

Configuration Items

     *

     *

 

 

Deployment

     *

 

     *

 

Deployment Package

     *

     *

 

 

Deployment Template

     *

 

 

 

Site

     *

 

 

 

Example Deployment Scenario

The Configuration Manager administrator at the central site reviews software updates on a monthly basis for her phased deployment scenario. The administrator has several deployment templates that she has created for her typical deployment scenarios. She adds the software updates to the update list and chooses to download the updates as part of the Update List Wizard. She creates a user group for her child site administrators, gives the user group the rights from the table above, and adds the child site administrators to the user group. She then instructs the Configuration Manager administrators at child sites to deploy the update list, using a specific deployment template, to all of the client computers at their sites.

The child site administrator expands the Deployment Templates console tree node, expands the Update Lists console tree node, and then drags the appropriate update list to the appropriate deployment template. The child site administrator selects an appropriate target collection, specifies the deployment schedule, and specifies whether to enable NAP evaluation.

Using an Update List to Deploy Software Updates

The update list is used to open the Deploy Software Updates Wizard to create software update deployments for the updates that are contained within the update list. This provides an easy method for creating multiple deployments for the same set of software updates without having to manually select the updates each time the deployment is created. Update lists can also be used to add software updates to an existing deployment.

The following methods open the Deploy Software Updates Wizard to create a new deployment for the software updates in the update list:

  • Right-click the update list, and click Deploy Software Updates.

  • Drag the update list to an existing deployment template.

The following method opens the Deploy Software Updates Wizard and adds the software updates in the update list to an existing deployment:

  • Drag the update list to an existing deployment.

Using Update Lists to Track Deployment State

Tracking the compliance state for the software updates in deployments is an important task for Configuration Manager administrators. When deployments are created without using update lists, it is very difficult to get the overall compliance state for the same set of software updates that have been deployed using multiple deployments. When update lists are used to create the deployments, you can run the Compliance 1 - Update list overall report to get the overall compliance for the set of software updates in the update list. You can also run the Compliance 3 - Update list (per update) report to get a list of the software updates in the update list and the overall compliance for each update. These reports provide another reason to use update lists as part of the normal software updates administrator workflow.

See Also