SCCM Automatic Deployment Rules

Question

Hello.

I am on an old System Center 2012 R2 Configuration Manager SP1
Site version: 5.00.8239.1000

This was setup many years ago when our clients were Windows 8.1.

In the meanwhile we moved to Windows 10 version 1909 (the most recent supported by our SCCM version).

Yes, we should update SCCM, and I'll do it probably next summer.

I will make separate ADRs (Automatic Deployment Rules) for:

• Windows 10
• Office
• Endpoint protection (intelligence and definition)

WSUS synchronization from Microsoft, once per day.
Endpoint protection ADR will be scheduled to deploy to all clients once per day.
The other ADRs will be scheduled once per month at three different times to three different collections (test pool, larger test pool, all).

Now my questions:

1. Can I reuse the same Update Group for more than one ADR? For instance, I plan to have

• ADR: Windows 10 Test (collection: Win10-T1, UG: W10)
• ADR: Windows 10 Test more (collection: Win10-T2, UG: W10)
• ADR: Windows 10 All (collection: Win10-All, UG: W10)

2) I assume that SCCM will be smart enough to update SGs automatically when there's a newer version, like endpoint protection updates. I also assume that SCCM will not update UGs that have not updates without version. Is that correct?

Best regards.
Roberto

Answer 1

First, it has to be said, everything you are doing is unsupported. You are using a 10-year-old product to manage a year-old version of Windows. That's not a path to success.

For your question though"

1. No. A software update group can only correspond to a single ADR. A software update group can be deployed to multiple collections though and starting in ConfigMgr 1610, ADRs can also be configured to create more than one deployment.
2. What goes into a software update group is all about the criteria you specify on the ADR. That's the explicit purpose of the ADR evaluation.