In Deploying Superseded Down Level Windows Updates with Microsoft Configuration Manager 2007, Microsoft’s J.C. Hornbeck outlined a big issue with the companies new Windows Update model for the servicing changes for Windows 7 and Windows 8.1. Essentially, due to how superseded updates are automatically expired and can no longer be deployed using the built-in software updates management (SUM) feature.
There is no fix planned for this – just a workaround:
Given that new Security Only Quality Updates are superseded by the new Security Monthly Quality Rollup for the same month, they will be marked as expired and unavailable for deployment each month via the SUM feature. Customers that desire to install Security Only Quality Updates will need to do so using an alternate deployment method (outside of SUM), such as general software distribution.
…and, obviously, moving away from SCCM 2007 to a newer version is probably the best case, but that’s not possible in all situations.
Looking for an awesome, no-nonsense technical conference for IT Pros, Devs, and DevOps? IT/Dev Connections kicks off in San Francisco in 2017!