手動部署軟體更新Manually deploy software updates

適用於: Configuration Manager (最新分支)Applies to: Configuration Manager (current branch)

在手動部署軟體更新的程序中,您將從 Configuration Manager 主控台選取軟體更新,然後手動啟動部署程序。A manual software update deployment is the process of selecting software updates from the Configuration Manager console and manually starting the deployment process. 或者,將選取的軟體更新新增到某個更新群組,然後手動部署更新群組。Or add selected software updates to an update group, and then manually deploy the update group. 您通常會使用手動部署,以利用必要的軟體更新取得用戶端的最新狀態。You typically use manual deployments to get your clients up-to-date with required software updates. 然後,使用自動部署規則 (ADR) 來管理進行中的每月軟體更新部署。You then use automatic deployment rules (ADR) to manage ongoing monthly software update deployments. 也請使用這個手動方法來部署頻外軟體更新。Also use this manual method to deploy out-of-band software updates. 如需哪種部署方法最適合您的詳細資訊,請參閱部署軟體更新For more information on which deployment method is right for you, see Deploy software updates.

步驟 1:指定軟體更新的搜尋準則Step 1: Specify search criteria for software updates

根據站台同步處理之產品和分類的組合而定,在 Configuration Manager 主控台內,可能會顯示數以千計的軟體更新。Depending upon the combinations of products and classifications that your site synchronizes, there are potentially thousands of software updates displayed in the Configuration Manager console. 手動部署軟體更新工作流程的第一個步驟是找出您要部署的軟體更新。The first step in the workflow for manually deploying software updates is to identify the software updates that you want to deploy. 例如,顯示超過 50 個用戶端裝置上所需且分類為 [安全性] 或 [重大] 的所有軟體更新。For example, show all software updates required on more than 50 client devices with a Security or Critical classification.

重要

單一軟體更新部署的限制為 1000 個軟體更新。A single software update deployment has a limit of 1000 software updates.

指定軟體更新之搜尋準則的程序Process to specify search criteria for software updates

  1. 在 Configuration Manager 主控台中,移至 [軟體程式庫] 工作區,展開 [軟體更新] ,然後按一下 [所有軟體更新] 。In the Configuration Manager console, go to the Software Library workspace, expand Software Updates, and click All Software Updates. 此節點隨即顯示所有已同步處理的軟體更新。This node displays all synchronized software updates.

    注意

    在 [所有軟體更新] 節點 上,只會顯示在過去 30 天內發行且分類為 [重大] 和 [安全性] 的軟體更新。The All Software Updates node only displays software updates with a Critical and Security classification that have been released in the last 30 days.

  2. 在搜尋窗格中,進行篩選以找出您需要的軟體更新。In the search pane, filter to identify the software updates that you need. 使用下列其中一個或兩個選項:Use one or both of the following options:

    • 在搜尋文字方塊中,鍵入可篩選軟體更新的搜尋字串。In the search text box, type a search string that filters the software updates. 例如,鍵入特定軟體更新的發行項或公告識別碼。For example, type the article or bulletin ID for a specific software update. 或者輸入數個軟體更新標題中顯示的字串。Or enter a string that appears in the title of several software updates.

    • 按一下 [新增準則] ,然後選取要篩選軟體更新的準則。Click Add Criteria, and select the criteria to filter software updates. 按一下 [新增] ,然後提供準則的值。Click Add, and then provide the values for the criteria.

  3. 按一下 [搜尋] 來篩選軟體更新:Click Search to filter the software updates.

    提示

    請儲存常用的篩選準則。Save frequently used filter criteria. 在功能區中,按一下 [儲存目前搜尋] 的選項。On the ribbon, click the option to Save Current Search. 按一下 [已儲存的搜尋] 即可擷取先前的搜尋。Retrieve previous searches by clicking on Saved Searches.

步驟 2:建立含有軟體更新的軟體更新群組Step 2: Create a software update group that contains the software updates

軟體更新群組可讓您組織軟體更新以準備進行部署。Software update groups let you organize software updates in preparation for deployment. 利用下列程序,將軟體更新手動新增至新的軟體更新群組。Use the following procedure to manually add software updates to a new software update group.

手動將軟體更新新增至新軟體更新群組的程序Process to manually add software updates to a new software update group

  1. 在 Configuration Manager 主控台中,移至 [軟體程式庫] 工作區,然後選取 [軟體更新] 。In the Configuration Manager console, go to the Software Library workspace, and select Software Updates. 選取所需的軟體更新。Select the desired software updates.

  2. 按一下功能區中的 [建立軟體更新群組] 。Click Create Software Update Group in the ribbon.

  3. 指定軟體更新群組的名稱,並選擇是否要提供描述。Specify the name for the software update group and optionally provide a description. 使用能為您提供足夠資訊的名稱和描述,來判斷哪一種類型的更新應在軟體更新群組中。Use a name and description that provide enough information for you to determine what type of updates are in the software update group. 按一下 [建立] 。Click Create.

  4. 選取 [軟體更新群組] 節點,並選取新的軟體更新群組。Select the Software Update Groups node, and select the new software update group. 若要顯示群組中的更新清單,請按一下功能區中的 [顯示成員] 。To display the list of updates in the group, click Show Members in the ribbon.

步驟 3:下載軟體更新群組的內容Step 3: Download the content for the software update group

在部署軟體更新之前,請下載軟體更新群組之軟體更新的內容。Before you deploy the software updates, download the content for the software updates in the software update group. 此步驟可讓您在部署軟體更新前,先行確認該內容是否可在發佈點上使用。This step lets you verify that the content is available on distribution points before you deploy the software updates. 它還可協助您避免發生任何非預期的內容發佈問題。It also helps you avoid any unexpected issues with content distribution. 如果您跳過此一步驟,則在部署程序期間,站台會下載內容並發佈到發佈點。If you skip this step, as part of the deployment process the site downloads the content and distributes to the distribution points. 利用下列程序,下載軟體更新群組中的軟體更新內容。Use the following procedure to download the content for software updates in the software update group.

下載軟體更新群組內容的程序Process to download content for the software update group

  1. 在 Configuration Manager 主控台中,移至 [軟體程式庫] 工作區,然後選取 [軟體更新] 節點。In the Configuration Manager console, go to the Software Library workspace, and select the Software Updates node.

  2. 使用以下其中一種方式選擇要下載的軟體更新:Choose the software update to download by using one of the following methods:

    • 從 [軟體更新群組] 節點,選取一或多個軟體更新群組。Select one or more software update groups from the Software Update Groups node. 然後,按一下功能區中的 [下載] 。Then click Download in the ribbon.

    • 從 [所有軟體更新] 節點,選取一或多個軟體更新。Select one or more software updates from All Software Updates node. 然後,按一下功能區中的 [下載] 。Then click Download in the ribbon.

      注意

      在 [所有軟體更新] 節點中,Configuration Manager 只會顯示在過去 30 天內發行且分類為 [重大] 和 [安全性] 的軟體更新。In the All Software Updates node, Configuration Manager displays only software updates with a Critical and Security classification that have been released in the last 30 days.

      提示

      按一下 [新增準則] 以篩選顯示在 [所有軟體更新] 節點中的軟體更新。Click Add Criteria to filter the software updates that are displayed in the All Software Updates node. 儲存常用的搜尋準則,然後在 [搜尋] 索引標籤上管理已儲存的搜尋。Save search criteria that you often use, and then manage saved searches on the Search tab.

  3. 在 [下載軟體更新精靈] 的 [部署套件] 頁面上,設定下列設定:On the Deployment Package page of the Download Software Updates Wizard, configure the following settings:

    • 選取部署套件:選擇此設定可針對部署中的軟體更新選取現有部署套件。Select deployment package: Choose this setting to select an existing deployment package for the software updates that are in the deployment.

      注意

      站台已下載至所選取部署套件的軟體更新將不會再次下載。Software updates that the site has already downloaded to the selected deployment package won't be downloaded again.

    • 建立新部署套件:選取此設定可針對部署中的軟體更新建立新的部署套件。Create a new deployment package: Select this setting to create a new deployment package for the software updates in the deployment. 進行以下設定:Configure the following settings:

      • 名稱:指定部署套件的名稱。Name: Specifies the name of the deployment package. 套件必須具有簡短描述套件內容的唯一名稱。The package must have a unique name that briefly describes the package content. 長度限制為 50 個字元。It's limited to 50 characters.

      • 描述:指定描述,提供部署套件的相關資訊。Description: Specify a description that provides information about the deployment package. 選擇性描述限制為 127 個字元。The optional description is limited to 127 characters.

      • 套件來源:指定軟體更新來源檔案的位置。Package source: Specifies the location of the software update source files. 鍵入來源位置的網路路徑 (例如 \\server\sharename\path),或按一下 [瀏覽] 尋找網路位置。Type a network path for the source location, for example, \\server\sharename\path, or click Browse to find the network location. 請先建立部署套件來源檔案的共用資料夾,再繼續前往下一個頁面。Create the shared folder for the deployment package source files before you proceed to the next page.

        • 您無法使用指定的位置作為另一個軟體部署套件的來源。You can't use the specified location as the source of another software deployment package.

        • 您可以在 Configuration Manager 建立部署套件之後,變更部署套件內容中的套件來源位置。You can change the package source location in the deployment package properties after Configuration Manager creates the deployment package. 如果您這樣做,就需先將內容從原始套件來源複製到新的套件來源位置。If you do, first copy the content from the original package source to the new package source location.

        • SMS 提供者電腦帳戶和執行精靈下載軟體更新的使用者,都必須具有下載位置的寫入權限。The computer account of the SMS Provider and the user that's running the wizard to download the software updates must both have Write permissions to the download location. 限制存取下載位置。Restrict access to the download location. 這項限制可降低攻擊者竄改軟體更新來源檔案的風險。This restriction reduces the risk of attackers tampering with the software update source files.

      • 啟用二進位差異複寫:啟用此設定,可將站台間的網路流量降到最低。Enable binary differential replication: Enable this setting to minimize network traffic between sites. 二進位差異複寫 (BDR) 只會更新套件中已變更的內容,而不是更新整個套件內容。Binary differential replication (BDR) only updates the content that has changed in the package, instead of updating the entire package contents. 如需詳細資訊,請參閱二進位差異複寫For more information, see Binary differential replication.

  4. 在 [發佈點] 頁面上,指定將裝載軟體更新檔案的發佈點或發佈點群組。On the Distribution Points page, specify the distribution points or distribution point groups to host the software update files. 如需發佈點的詳細資訊,請參閱 Distribution point configurationsFor more information about distribution points, see Distribution point configurations. 此頁面只有在您建立新的軟體更新部署套件時才可使用。This page is available only when you create a new software update deployment package.

  5. 只有在您建立新的軟體更新部署套件時才能使用 [發佈設定] 頁面。The Distribution Settings page is available only when you create a new software update deployment package. 指定下列設定:Specify the following settings:

    • 發佈優先順序:使用此設定可指定部署套件的發佈優先順序。Distribution priority: Use this setting to specify the distribution priority for the deployment package. 將部署套件傳送到子網站上的發佈點時,會套用發佈優先順序。The distribution priority applies when the deployment package is sent to distribution points at child sites. 部署套件會依優先順序傳送:高、中或低。Deployment packages are sent in priority order: high, medium, or low. 優先順序相同的套件,會依照建立的順序傳送。Packages with identical priorities are sent in the order in which they were created. 若沒有待處理項目,則無論套件的優先順序為何,系統都會立即處理它。If there's no backlog, the package processes immediately regardless of its priority. 根據預設,站台會傳送優先順序為 [中] 的套件。By default, the site sends packages with Medium priority.

    • Enable for on-demand distribution (啟用依需求發佈) :使用此設定可依需求將內容發佈至用戶端目前界限群組中為此功能設定的發佈點。Enable for on-demand distribution: Use this setting to enable on-demand content distribution to distribution points configured for this feature and in the client's current boundary group. 當您啟用此設定時,管理點會為發佈管理員建立觸發程序,在用戶端要求套件內容但內容無法使用時,將內容發佈至所有這類發佈點。When you enable this setting, the management point creates a trigger for the distribution manager to distribute the content to all such distribution points when a client requests the content for the package and the content isn't available. 如需詳細資訊,請參閱依需求發佈內容For more information, see On-demand content distribution.

    • 預先設置的發佈點設定:使用此設定可指定您要如何將內容發佈至預先設置的發佈點。Prestaged distribution point settings: Use this setting to specify how you want to distribute content to prestaged distribution points. 選擇下列其中一個選項:Choose one of the following options:

      • 當套件指派給發佈點時,自動下載內容:使用此設定以忽略預先設置的設定,並將內容發佈到發佈點。Automatically download content when packages are assigned to distribution points: Use this setting to ignore the prestage settings and distribute content to the distribution point.

      • 僅下載發佈點的內容變更:使用此設定可將初始內容預先設置至發佈點,再將內容變更發佈至發佈點。Download only content changes to the distribution point: Use this setting to prestage the initial content to the distribution point, and then distribute content changes to the distribution point.

      • 將此套件中的內容手動複製到發佈點:使用此設定則一律在發佈點上預先設置內容。Manually copy the content in this package to the distribution point: Use this setting to always prestage content on the distribution point. 此選項是預設值。This option is the default.

      如需在發佈點上預先設置內容的詳細資訊,請參閱使用預先設置的內容For more information about prestaging content to distribution points, see Use Prestaged content.

  6. 在 [下載位置] 頁面上,指定 Configuration Manager 用來下載軟體更新來源檔案的位置。On the Download Location page, specify the location that Configuration Manager uses to download the software update source files. 使用下列其中一個選項:Use one of the following options:

    • 從網際網路下載軟體更新:選取此設定可從網際網路上的位置下載軟體更新。Download software updates from the Internet: Select this setting to download the software updates from the location on the internet. 此選項是預設值。This option is the default.

    • Download software updates from a location on my network /(從我的網路位置下載軟體更新/) :選取此設定可從本機目錄或共用資料夾下載軟體更新。Download software updates from a location on my network: Select this setting to download the software updates from a local directory or shared folder. 此設定在執行精靈的電腦沒有網際網路存取時很實用。This setting is useful when the computer that runs the wizard doesn't have internet access. 任何具有網際網路存取的電腦都可以預先下載軟體更新。Any computer with internet access can preliminarily download the software updates. 然後,將它們儲存在本機網路上執行精靈的電腦可存取的位置。Then store them in a location on the local network that's accessible from the computer that runs the wizard.

  7. 在 [語言選擇] 頁面上,選取站台下載已選取之軟體更新所使用的語言。On the Language Selection page, select the languages for which the site downloads the selected software updates. 只有在軟體更新有提供所選取的語言時,站台才會進行下載。The site only downloads these updates if they're available in the selected languages. 無指定語言的軟體更新一律會下載。Software updates that aren't language-specific are always downloaded. 根據預設,精靈會選取您在軟體更新點內容中設定的語言。By default, the wizard selects the languages that you've configured in the software update point properties. 您必須至少選取一種語言才能繼續至下一頁。At least one language must be selected before proceeding to the next page. 如果您只選取軟體更新不支援的語言,則更新下載會失敗。When you select only languages that a software update doesn't support, the download fails for the update.

  8. 在 [摘要] 頁面上,確認您在精靈中選取的設定,然後按一下 [下一步] 下載軟體更新。On the Summary page, verify the settings that you selected in the wizard, and then click Next to download the software updates.

  9. 在 [完成] 頁面上,確認軟體更新已成功下載,然後按一下 [關閉] 。On the Completion page, verify that the software updates were successfully downloaded, and then click Close.

監視內容狀態的程序Process to monitor content status

  1. 若要監視軟體更新的內容狀態,請移至 Configuration Manager 主控台中的 [監視] 工作區。To monitor the content status for the software updates, go to the Monitoring workspace in the Configuration Manager console. 展開 [發佈狀態] ,然後選取 [內容狀態] 節點。Expand Distribution Status, and then select the Content Status node.

  2. 選取您之前找到的軟體更新套件,將軟體更新下載至軟體更新群組。Select the software update package that you previously identified to download the software updates in the software update group.

  3. 按一下功能區中的 [檢視狀態] 。Click View Status in the ribbon.

步驟 4:部署軟體更新群組Step 4: Deploy the software update group

在您決定要部署的更新並將其新增至軟體更新群組之後,請手動部署軟體更新群組。After you determine the updates you want to deploy, and add them to a software update group, manually deploy the software update group.

手動部署軟體更新群組之軟體更新的程序Process to manually deploy the software updates in a software update group

  1. 在 Configuration Manager 主控台中,移至 [軟體程式庫] 工作區,展開 [軟體更新] ,然後選取 [軟體更新群組] 節點。In the Configuration Manager console, go to the Software Library workspace, expand Software Updates, and select the Software Update Groups node.

  2. 選取您要部署的軟體更新群組。Select the software update group that you want to deploy. 按一下功能區中的 [部署] 。Click Deploy in the ribbon.

  3. 在 [部署軟體更新精靈] 的 [一般] 頁面上,指定下列設定:On the General page of the Deploy Software Updates Wizard, configure the following settings:

    • 名稱:指定部署的名稱。Name: Specify the name for the deployment. 部署必須擁有可描述其目的的唯一名稱,並區別其與站台中的其他部署。The deployment must have a unique name that describes its purpose, and differentiates it from other deployments in the site. 此名稱欄位的限制為 256 個字元。This name field has a limit of 256 characters. 根據預設,Configuration Manager 會自動以下列格式提供部署名稱:Microsoft Software Updates - YYYY-MM-DD <time>By default, Configuration Manager automatically provides a name for the deployment in the following format: Microsoft Software Updates - YYYY-MM-DD <time>

    • 描述:指定部署的描述。Description: Specify a description for the deployment. 描述是選擇性項目,但可提供部署的概觀。The description is optional, but provides an overview of the deployment. 包含任何其他相關資訊,可協助識別和區別其與站台中的其他項目。Include any other relevant information that helps to identify and differentiate it among others in the site. 描述欄位的限制為 256 個字元,預設為空白值。The description field has a limit of 256 characters, and has a blank value by default.

    • 軟體更新/軟體更新群組:確認顯示的軟體更新群組或軟體更新正確。Software Update/Software Update Group: Verify that the displayed software update group or software update is correct.

    • 選取部署範本:指定是否要套用先前儲存的部署範本。Select Deployment Template: Specify whether to apply a previously saved deployment template. 設定部署範本來儲存常見的軟體更新部署內容。Configure a deployment template to save common software update deployment properties. 然後在您未來部署軟體更新時套用範本。Then apply the template when you deploy software updates in the future. 這些範本可節省時間,並協助確保類似部署的一致性。These templates save time and help to ensure consistency across similar deployments.

    • 集合:指定部署的集合。Collection: Specify the collection for the deployment. 集合中的裝置會收到此部署中的軟體更新。Devices in the collection receive the software updates in this deployment.

  4. 在 [部署設定]  頁面上,指定下列設定:On the Deployment Settings page, configure the following settings:

    • 部署類型:指定軟體更新部署的部署類型。Type of deployment: Specify the deployment type for the software update deployment.

      重要

      建立軟體更新部署之後,您就無法變更部署類型。After you create the software update deployment, you can't change the type of deployment.

      • 選取 [必要] 來建立強制軟體更新部署。Select Required to create a mandatory software update deployment. 在您設定的安裝期限之前,會將軟體更新自動安裝在用戶端上。The software updates are automatically installed on clients before the installation deadline you configure.

      • 選取 [可用] 來建立選擇性的軟體更新部署。Select Available to create an optional software update deployment. 此部署可供使用者從軟體中心進行安裝。This deployment is available for users to install from Software Center.

      注意

      當您將軟體更新群組部署為 [必要] 時,用戶端會在背景中下載內容,並在設有 BITS 設定的情況下加以執行。When you deploy a software update group as Required, clients download the content in background and honor BITS settings, if configured.

      對於部署為 [可用] 的軟體更新群組,用戶端則會在前景中下載內容,並忽略 BITS 設定。For software update groups deployed as Available, clients download the content in the foreground and ignore BITS settings.

    • 使用網路喚醒來喚醒用戶端以進行必要部署:指定是否於期限啟用網路喚醒。Use Wake-on-LAN to wake up clients for required deployments: Specifies whether to enable Wake On LAN at the deadline. 網路喚醒將喚醒封包 (該封包於部署中需要一或多個軟體更新) 傳送到某部電腦上。Wake On LAN sends wake-up packets to computers that require one or more software updates in the deployment. 站台會喚醒任何在安裝期限處於睡眠模式的電腦,以便起始安裝。The site wakes up any computers that are in sleep mode at the installation deadline time so the installation can initiate. 在部署中處於睡眠狀態且不需要任何軟體更新的用戶端並不會啟動。Clients that are in sleep mode that don't require any software updates in the deployment aren't started. 根據預設不會啟用此設定。By default, this setting isn't enabled. 它僅適用於 [必要] 部署。It's only available for Required deployments. 使用此選項之前,請先針對 [網路喚醒] 設定電腦和網路。Before using this option, configure computers and networks for Wake On LAN. 如需詳細資訊,請參閱如何設定網路喚醒For more information, see How to configure Wake On LAN.

    • 詳細等級:針對用戶端回報給網站的狀況訊息,指定詳細資料等級。Detail level: Specify the level of detail for the state messages that clients report to the site.

  5. 在 [排程] 頁面上,指定下列設定:On the Scheduling page, configure the following settings:

    • 為評估排程:指定 Configuration Manager 對可用時間及安裝期限進行評估的時間。Schedule evaluation: Specify the time that Configuration Manager evaluates the available time and installation deadline times. 選擇使用國際標準時間 (UTC) 或執行 Configuration Manager 主控台之電腦的本機時間。Choose to use Coordinated Universal Time (UTC) or the local time of the computer that runs the Configuration Manager console.

      • 當您在此處選取 [用戶端本機時間] ,然後針對 [軟體可用時間] 選取 [盡快] 時,就會使用執行 Configuration Manager 主控台之電腦上的目前時間,來評估更新可用的時間。When you select Client local time here, and then select As soon as possible for the Software available time, the current time on the computer running the Configuration Manager console is used to evaluate when updates are available. 此行為與 [安裝期限] 和用戶端上安裝更新的時間相同。This behavior is the same with the Installation deadline and the time when updates are installed on a client. 如果用戶端位於不同時區,則會在用戶端的時間達到評估時間時,執行這些動作。If the client is in a different time zone, these actions occur when the client's time reaches the evaluation time.
    • 軟體可用時間:選取以下其中一種設定來指定用戶端何時可以使用軟體更新:Software available time: Select one of the following settings to specify when the software updates are available to clients:

      • 盡快:可讓用戶端在最短時間內使用部署中的軟體更新。As soon as possible: Makes the software updates in the deployment available to clients as soon as possible. 利用選取的設定建立部署時,Configuration Manager 會更新用戶端原則。When you create the deployment with this setting selected, Configuration Manager updates the client policy. 在下一個用戶端原則輪詢循環中,用戶端將會察覺該部署且軟體更新可供安裝。At the next client policy polling cycle, clients become aware of the deployment and the software updates are available for installation.

      • 特定時間:在特定的日期和時間將包含在部署中的軟體更新提供給用戶端。Specific time: Makes software updates included in the deployment available to clients at a specific date and time. 建立部署時啟用此設定,Configuration Manager 會更新用戶端原則。When you create the deployment with this setting enabled, Configuration Manager updates the client policy. 在下一個用戶端原則輪詢循環中,用戶端將會察覺該部署。At the next client policy polling cycle, clients become aware of the deployment. 不過,在設定的日期和時間之前,無法使用部署中的軟體更新進行安裝。However, the software updates in the deployment aren't available for installation until after the configured date and time.

    • 安裝期限:這些選項僅適用於必要部署。Installation deadline: These options are only available for Required deployments. 選取下列其中一個設定,以指定部署中軟體更新的安裝期限Select one of the following settings to specify the installation deadline for the software updates in the deployment

      • 盡快:選取此設定,以自動在最短時間內安裝部署中的軟體更新。As soon as possible: Select this setting to automatically install the software updates in the deployment as soon as possible.

      • 特定時間:選取此設定,以在特定日期和時間自動安裝部署中的軟體更新。Specific time: Select this setting to automatically install the software updates in the deployment at a specific date and time.

        • 實際安裝期限時間是顯示的期限時間再加上最多 2 小時的隨機時間量。The actual installation deadline time is the displayed deadline time plus a random amount of time up to two hours. 此隨機設定可降低集合中用戶端同時安裝部署中更新可能造成的影響。The randomization reduces the potential impact of clients in the collection installing updates in the deployment at the same time.

        • 若要針對必要的軟體更新停用安裝隨機延遲,請設定 [電腦代理程式] 群組中 [停用期限隨機設定] 的用戶端設定。To disable the installation randomization delay for required software updates, configure the client setting to Disable deadline randomization in the Computer Agent group. 如需詳細資訊,請參閱電腦代理程式用戶端設定For more information, see Computer Agent client settings.

    • 根據使用者喜好延遲實行此部署,最多延後至用戶端設定中定義的寬限期:啟用此設定可提供使用者更多時間,讓他們在期限過後安裝必要軟體更新。Delay enforcement of this deployment according to user preferences, up to the grace period defined in client settings: Enable this setting to give users more time to install required software updates beyond the deadline.

      • 當電腦已長時間關閉,而需要安裝大量軟體更新或應用程式時,通常就需要允許此行為。This behavior is typically required when a computer is turned off for long time, and needs to install many software updates or applications. 例如,當使用者從假期歸來時,他們必須等候很長的時間,讓用戶端安裝逾期的部署。For example, when a user returns from vacation, they have to wait for a long time as the client installs overdue deployments.

      • 使用用戶端設定中的 [延後到部署期限後施行的寬限期 (小時)] 內容來設定此寬限期。Configure this grace period with the property Grace period for enforcement after deployment deadline (hours) in client settings. 如需詳細資訊,請參閱電腦代理程式一節。For more information, see the Computer agent section. 已啟用此選項且以您一併部署用戶端設定之裝置為目標的所有部署,都適用此施行寬限期。The enforcement grace period applies to all deployments with this option enabled and targeted to devices to which you also deployed the client setting.

      • 期限之後,用戶端就會在使用者所設定的第一個非營業時間內安裝此軟體更新,直到該寬限期結束為止。After the deadline, the client installs the software updates in the first non-business window, which the user configured, up to this grace period. 不過,使用者仍可隨時開啟軟體中心並安裝軟體更新。However, the user can still open Software Center and install the software updates at any time. 過了寬限期後,就會強制還原為逾時部署的標準行為。Once the grace period expires, enforcement reverts to normal behavior for overdue deployments.

  6. 在 [使用者體驗] 頁面上,指定下列設定:On the User Experience page, configure the following settings:

    • 使用者通知:指定是否要在設定的軟體可用時間,於軟體中心內顯示通知。User notifications: Specify whether to display notification in Software Center at the configured Software available time. 此設定也會控制是否要在用戶端電腦上通知使用者。This setting also controls whether to notify users on the client computers. 針對 [可用] 部署,您無法選取 [在軟體中心和所有通知中隱藏] 選項。For Available deployments, you can't select the option to Hide in Software Center and all notifications.

    • 期限行為:只有必要部署才能進行這個設定。Deadline behavior: This setting is only configurable for Required deployments. 當軟體更新部署達到任何定義之維護期間以外的期限時,此設定會指定相關行為。Specify the behaviors when the software update deployment reaches the deadline outside of any defined maintenance windows. 這些選項包括是否要安裝軟體更新,以及是否要在安裝後執行系統重新啟動。The options include whether to install the software updates, and whether to perform a system restart after installation. 如需維護期間的詳細資訊,請參閱如何在 Configuration Manager 中使用維護期間For more information about maintenance windows, see How to use maintenance windows.

      注意

      只有在為用戶端裝置設定了維護時段時,才適用此選項。This applies only when the maintenance window is configured for the client device. 如果未在裝置上定義任何維護時段,則一律會在期限後進行安裝更新和重新啟動。If no maintenance window is defined on the device, the update of the installation and restart will always happen after the deadline.

    • 裝置重新啟動行為:只有必要部署才能進行這個設定。Device restart behavior: This setting is only configurable for Required deployments. 指定當必須重新啟動才能完成更新安裝時,是否要抑制伺服器和工作站上的系統重新啟動。Specify whether to suppress a system restart on servers and workstations if a restart is required to complete update installation.

      警告

      在伺服器環境中,或當您不想在預設情況下重新啟動目標電腦時,抑制系統重新啟動很有用。Suppressing system restarts can be useful in server environments, or when you don't want the target computers to restart by default. 不過,這麼做會讓電腦處於不安全的狀態。However, doing so can leave computers in an insecure state. 允許強制重新啟動可協助您確保立即完成軟體更新安裝。Allowing a forced restart helps to ensure immediate completion of the software update installation.

    • Windows Embedded 裝置的寫入篩選處理:這項設定會在具備寫入篩選功能的 Windows Embedded 裝置上控制安裝行為。Write filter handling for Windows Embedded devices: This setting controls the installation behavior on Windows Embedded devices that are enabled with a write filter. 選擇在安裝期限或維護期間認可變更的選項。Choose the option to commit changes at the installation deadline or during a maintenance window. 當您選取此選項時,需要重新啟動裝置才能保存裝置的變更。When you select this option, a restart is required and the changes persist on the device. 否則會將更新安裝、套用至暫存重疊,並於稍後認可。Otherwise, the update is installed, applied to the temporary overlay, and committed later.

      • 當您將軟體更新部署至 Windows Enbedded 裝置時,請確定裝置是已設定維護期間之集合的成員。When you deploy a software update to a Windows Embedded device, make sure the device is a member of a collection that has a configured maintenance window.
    • 重新啟動時的軟體更新部署重新評估行為:選取此設定,就會將軟體更新部署設定成在用戶端安裝軟體更新並重新啟動之後,讓用戶端立即執行軟體更新相容性掃描。Software updates deployment re-evaluation behavior upon restart: Select this setting to configure software updates deployments to have clients run a software updates compliance scan immediately after a client installs software updates and restarts. 此設定可讓用戶端檢查是否有在用戶端重新啟動後變成適用的額外更新,然後在同一個維護期間內安裝這些更新。This setting enables the client to check for additional updates that become applicable after the client restarts, then installs them during the same maintenance window.

  7. 在 [警示] 頁面上,設定 Configuration Manager 如何針對此部署產生警示。On the Alerts page, configure how Configuration Manager generates alerts for this deployment. 透過 [軟體程式庫] 工作區之 [軟體更新] 節點中的 Configuration Manager,檢閱最新的軟體更新警示。Review recent software updates alerts from Configuration Manager in the Software Updates node of the Software Library workspace. 如果您同時使用 System Center Operations Manager,也請設定其警示。If you're also using System Center Operations Manager, configure its alerts as well. 只能針對 [必要] 部署設定警示。Only configure alerts for Required deployments.

  8. 在 [下載設定] 頁面上,指定下列設定:On the Download Settings page, configure the following settings:

    注意

    用戶端會從部署內軟體更新的管理點來請求內容位置。Clients request the content location from a management point for the software updates in a deployment. 下載行為會根據您如何設定發佈點、部署套件和本頁設定而定。The download behavior depends upon how you've configured the distribution point, the deployment package, and the settings on this page.

    • 指定當用戶端使用鄰近或預設站台界限群組中的發佈點時,是否應該下載並安裝更新。Specify if clients should download and install the updates when they use a distribution point from a neighbor or the default site boundary groups.

    • 指定當目前或鄰近界限群組中的發佈點沒有軟體更新內容可用時,用戶端是否應該從站台預設界限群組中的發佈點下載並安裝更新。Specify if clients should download and install the updates from a distribution point in the site default boundary group, when the content for the software updates isn't available from a distribution point in the current or neighbor boundary groups.

    • 允許用戶端與同一個子網路上的其他用戶端共用內容:指定是否要針對內容下載啟用使用 BranchCache。Allow clients to share content with other clients on the same subnet: Specify whether to enable the use of BranchCache for content downloads. 如需詳細資訊,請參閱 BranchCacheFor more information, see BranchCache. 從 1802 版開始,用戶端上一律會啟用 BranchCache。Starting in version 1802, BranchCache is always enabled on clients. 此設定已移除,因為用戶端會使用 BranchCache (如果發佈點支援)。This setting is removed, as clients use BranchCache if the distribution point supports it.

    • 如果在目前、鄰近或站台界限群組的發佈點上找不到軟體更新,則從 Microsoft Update 下載內容:選取這項設定的話,如果在發佈點上找不到更新,就會讓連線到內部網路的用戶端從 Microsoft Update 下載軟體更新。If software updates are not available on distribution point in current, neighbor or site boundary groups, download content from Microsoft Updates: Select this setting to have intranet-connected clients download software updates from Microsoft Update if updates aren't available on distribution points. 以網際網路為基礎的用戶端隨時可移至 Microsoft Update 取得軟體更新內容。Internet-based clients always go to Microsoft Update for software updates content.

    • 指定當用戶端使用計量付費網際網路連線時,是否在過了安裝期限後仍允許用戶端進行下載。Specify whether to allow clients to download after an installation deadline when they use metered internet connections. 在您處於計量付費連線時,網際網路提供者有時會根據您傳送和接收的資料量來收取費用。Internet providers sometimes charge by the amount of data that you send and receive when you're on a metered connection.

  9. 在 [部署套件] 頁面上,選取下列其中一個選項:On the Deployment Package page, select one of the following options:

    注意

    如果您已經執行步驟 3:下載軟體更新群組的內容,精靈就不會顯示 [部署套件] 、[發佈點] 及 [語言選擇] 頁面。If you already performed Step 3: Download the content for the software update group, then the wizard doesn't display the Deployment Package, Distribution Points, and Language Selection pages. 請跳至精靈的 [摘要] 頁面。Skip to the Summary page of the wizard.

    先前已經下載到網站伺服器上內容庫的軟體更新,不能再次下載。Software updates that have been previously downloaded to the content library on the site server aren't downloaded again. 即使在您針對軟體更新建立新的部署套件時,也會出現此行為。This behavior is true even when you create a new deployment package for the software updates. 如果已下載所有的軟體更新,精靈就會跳到 [摘要] 頁面。If all software updates have already been downloaded, the wizard skips to the Summary page.

    • 選取部署套件:將這些更新新增至現有的部署套件。Select a deployment package: Add these updates to an existing deployment package.

    • 建立新的部署套件:將這些更新新增至新的部署套件。Create a new deployment package: Add these updates to a new deployment package. 指定下列其他設定:Configure the following additional settings:

      • 名稱:指定部署套件的名稱。Name: Specify the name of the deployment package. 請使用一個描述套件內容的唯一名稱。Use a unique name that describes the package content. 長度限制為 50 個字元。It's limited to 50 characters.

      • 描述:指定描述,提供有關部署套件的資訊。Description: Specify a description that provides information about the deployment package. 選擇性描述限制為 127 個字元。The optional description is limited to 127 characters.

      • 套件來源:指定軟體更新來源檔案的位置。Package source: Specify the location of the software update source files. 鍵入來源位置的網路路徑 (例如 \\server\sharename\path),或按一下 [瀏覽] 尋找網路位置。Type a network path for the source location, for example, \\server\sharename\path, or click Browse to find the network location. 請先建立部署套件來源檔案的共用資料夾,再繼續執行下一個頁面。Create the shared folder for the deployment package source files before you continue to the next page.

        • 您無法使用指定的位置作為另一個軟體部署套件的來源。You can't use the specified location as the source of another software deployment package.

        • 您可以在 Configuration Manager 建立部署套件之後,變更部署套件內容中的套件來源位置。You can change the package source location in the deployment package properties after Configuration Manager creates the deployment package. 如果您這樣做,就需先將內容從原始套件來源複製到新的套件來源位置。If you do, first copy the content from the original package source to the new package source location.

        • SMS 提供者電腦帳戶和執行精靈下載軟體更新的使用者,都必須具有下載位置的寫入權限。The computer account of the SMS Provider and the user that's running the wizard to download the software updates must both have Write permissions to the download location. 限制存取下載位置。Restrict access to the download location. 這項限制可降低攻擊者竄改軟體更新來源檔案的風險。This restriction reduces the risk of attackers tampering with the software update source files.

      • 傳送優先順序:指定部署封裝的傳送優先順序。Sending priority: Specify the sending priority for the deployment package. Configuration Manager 將套件傳送到發佈點時,會使用此優先順序。Configuration Manager uses this priority when it sends the package to distribution points. 部署套件會依優先順序傳送:高、中或低。Deployment packages are sent in priority order: high, medium, or low. 優先順序相同的套件,會依照建立的順序傳送。Packages with identical priorities are sent in the order in which they were created. 若沒有待處理項目,則無論套件的優先順序為何,系統都會立即處理它。If there's no backlog, the package processes immediately regardless of its priority.

      • 啟用二進位差異複寫:啟用此設定可將網站之間的網路流量降到最低。Enable binary differential replication: Enable this setting to minimize network traffic between sites. 二進位差異複寫 (BDR) 只會更新套件中已變更的內容,而不是更新整個套件內容。Binary differential replication (BDR) only updates the content that has changed in the package, instead of updating the entire package contents. 如需詳細資訊,請參閱二進位差異複寫For more information, see Binary differential replication.

    • 無部署套件:從 1806 版開始,不必先下載內容並將其發佈至發佈點,就可以將軟體更新部署至裝置。No deployment package: Starting in version 1806, deploy software updates to devices without first downloading and distributing content to distribution points. 處理極大量更新內容時,這項設定很有幫助。This setting is beneficial when dealing with extremely large update content. 一律要讓用戶端從 Microsoft Update 的雲端服務取得內容時,也請使用它。Also use it when you always want clients to get content from the Microsoft Update cloud service. 此案例中的用戶端也可以從已具有必要內容的對等節點下載內容。Clients in this scenario can also download content from peers that already have the necessary content. Configuration Manager 用戶端會繼續管理內容的下載,因此可以利用 Configuration Manager 的對等快取功能或其他技術,例如傳遞最佳化。The Configuration Manager client continues to manage the content download, thus can utilize the Configuration Manager peer cache feature, or other technologies such as Delivery Optimization. 這項功能支援 Configuration Manager 軟體更新管理所支援的任何更新類型,包括 Windows 和 Office 更新。This feature supports any update type supported by Configuration Manager software updates management, including Windows and Office updates.

  10. 在 [發佈點] 頁面上,指定將裝載軟體更新檔案的發佈點或發佈點群組。On the Distribution Points page, specify the distribution points or distribution point groups to host the software update files. 如需發佈點的詳細資訊,請參閱發佈點設定For more information about distribution points, see Distribution point configurations.

    注意

    如果您已經執行步驟 3:下載軟體更新群組的內容,精靈就不會顯示 [部署套件] 、[發佈點] 及 [語言選擇] 頁面。If you already performed Step 3: Download the content for the software update group, then the wizard doesn't display the Deployment Package, Distribution Points, and Language Selection pages. 請跳至精靈的 [摘要] 頁面。Skip to the Summary page of the wizard.

  11. 在 [下載位置] 頁面上,指定要從網際網路或您的區域網路下載軟體更新檔案。On the Download Location page, specify whether to download the software update files from the internet or from your local network. 進行以下設定:Configure the following settings:

    • 從網際網路下載軟體更新:選取此設定可從網際網路上的指定位置下載軟體更新。Download software updates from the internet: Select this setting to download the software updates from a specified location on the internet. 預設會啟用此設定。This setting is enabled by default.

    • 從本機網路上的位置下載軟體更新:選取此設定會從本機目錄或共用資料夾下載軟體更新。Download software updates from a location on the local network: Select this setting to download the software updates from a local directory or shared folder. 此設定在執行精靈的電腦沒有網際網路存取時很實用。This setting is useful when the computer that runs the wizard doesn't have internet access. 任何具有網際網路存取的電腦都可以預先下載軟體更新。Any computer with internet access can preliminarily download the software updates. 然後,將它們儲存在本機網路上執行精靈的電腦可存取的位置。Then store them in a location on the local network that's accessible from the computer that runs the wizard.

  12. 在 [語言選擇] 頁面上,選取站台下載已選取之軟體更新所使用的語言。On the Language Selection page, select the languages for which the site downloads the selected software updates. 只有在軟體更新有提供所選取的語言時,站台才會進行下載。The site only downloads these updates if they're available in the selected languages. 無指定語言的軟體更新一律會下載。Software updates that aren't language-specific are always downloaded. 根據預設,精靈會選取您在軟體更新點內容中設定的語言。By default, the wizard selects the languages that you've configured in the software update point properties. 您必須至少選取一種語言才能繼續至下一頁。At least one language must be selected before proceeding to the next page. 如果您只選取軟體更新不支援的語言,則更新下載會失敗。When you select only languages that a software update doesn't support, the download fails for the update.

    注意

    如果您已經執行步驟 3:下載軟體更新群組的內容,精靈就不會顯示 [部署套件] 、[發佈點] 及 [語言選擇] 頁面。If you already performed Step 3: Download the content for the software update group, then the wizard doesn't display the Deployment Package, Distribution Points, and Language Selection pages. 請跳至精靈的 [摘要] 頁面。Skip to the Summary page of the wizard.

  13. 在 [摘要] 頁面上檢閱設定。On the Summary page, review the settings. 若要將設定儲存至部署範本,請按一下 [儲存成範本] 。To save the settings to a deployment template, click Save As Template. 輸入名稱並選取要包含在範本中的設定,然後按一下 [儲存] 。Enter a name and select the settings you want to include in the template, then click Save. 若要變更已經設定的設定,請按一下相關聯的精靈頁面,然後變更設定。To change a configured setting, click the associated wizard page and change the setting.

    • 範本名稱可以包含英數字 ASCII 字元以及 \ (反斜線) 或 ' (單引號)。The template name can consist of alphanumeric ASCII characters as well as \ (backslash) or ' (single quotation mark).
  14. 按 [下一步] 部署軟體更新。Click Next to deploy the software update.

    完成精靈之後,Configuration Manager 會將軟體更新下載到站台伺服器上的內容庫。After you complete the wizard, Configuration Manager downloads the software updates to the content library on the site server. 然後,它會將內容發佈至設定的發佈點,並將軟體更新群組部署到目標集合中的用戶端。It then distributes the content to the configured distribution points, and deploys the software update group to clients in the target collection. 如需部署程序的詳細資訊,請參閱 Software update deployment processFor more information about the deployment process, see Software update deployment process.

後續步驟Next steps

監視軟體更新Monitor software updates