--- title: Better Understanding of the SCCM SUP Process description: IT teams recognize the importance of timely patching but can become overwhelmed by the frequency of software updates across large numbers of devices. Microsoft System Center Configuration Manager (SCCM) provides tools for streamlining the deployment of software updates across the enterprise. image: https://info.adaptivedge.com/hubfs/Images/SUP%20Flow%20Chart.jpg --- Call us Today! (866) 846-7123 [![AdaptivEdge](https://info.adaptivedge.com/hs-fs/hubfs/adaptivedge.png?width=249&height=50&name=adaptivedge.png "AdaptivEdge")](http://adaptivedge.com/) - [Home](http://adaptivedge.com/) - [About](http://adaptivedge.com/about/) - [News & Events](http://adaptivedge.com/news-events/) - [Expertise](http://adaptivedge.com/expertise/) - [Solutions](http://adaptivedge.com/services/) - [News & Events](http://adaptivedge.com/news-events/) - [Blog](https://info.adaptivedge.com/blog) - [Contact](http://adaptivedge.com/contact-us/) # Better Understanding of the SCCM SUP Process 2018-03-16 17:52:06 Posted by [aeadmin](https://info.adaptivedge.com/blog/author/aeadmin) on Mar 16, 2018, 10:52:06 AM - [Tweet](https://twitter.com/share)   In a recent alert, the U.S. Computer Emergency Readiness Team (US-CERT) said that about 85 percent of successful security breaches involve systems that have not been patched. A recent study by research firm Voke Media found that 82 percent of security breaches since 2015 occurred due to unapplied patches that had been available for up to a year. IT teams recognize the importance of timely patching but can become overwhelmed by the frequency of software updates across large numbers of devices. **Microsoft System Center Configuration Manager (SCCM)** provides tools for streamlining the deployment of software updates in Windows clients across the enterprise.  There are three primary considerations when managing the update process — the clients to be updated, the patches to be deployed and the time period when they can be deployed. A **Software Update Point (SUP)** is a system role installed on a Windows Server Update Service (WSUS) server that allows you to create packages of updates according to various criteria. SCCM also allows you to create collections of devices to be updated and to set up maintenance windows with a start date, a start and finish time, and a recurrence pattern. Once a package is created, it is sent to one or more distribution points. SCCM’s powerful scheduler can then be used to automatically push out updates to target clients according to **Automated Deployment Rules (ADRs)**. Generally, if a maintenance window has not been defined, updates are installed according to the settings in the ADR. If a maintenance window has been defined, updates will install during that window unless the ADR overrides it or the deployment has been set to less than one hour prior to the maintenance window. The following flow chart illustrates this general process: This is an overview of the Windows Update process from a SCCM client’s perspective through the Software Update Point (SUP).   # **SUP FLOW CHART**  ![SUP Flow Chart.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/SUP%20Flow%20Chart.jpg?width=763&height=656&name=SUP%20Flow%20Chart.jpg)     \*This is the general flow of updates and the decisions surrounding maintenance windows with the client collections. This is just an overall best practice method and does NOT take into account large deployments. Adjust the maintenance window as needed. SCCM also provides manual deployment tools, which are typically used to get clients up-to-date prior to creating ADRs or to implement out-of-band software updates. A key component of this process is the **Software Updates Deployment Evaluation Cycle**, which scans new and existing clients to determine the status of their software updates and identify updates that need to be implemented. Once the scan is complete, the **Windows Update Handler** initiates the Windows Update Service on each client machine, and installs the updates against the SUP during the maintenance window. The **Package Transfer Manager** coordinates the transfer of content and creates a log file of its activities. If the updates fail to run due to a maintenance window conflict, the **UpdatesDeployment.log** will include a message stating “No current service windows available to run updates assignment with time required.” If this occurs, the **Content Transfer Manager** downloads the update package from a distribution point so that the updates can be installed on the target machines. Once that’s complete, the SCCM server’s Deployment Status will show that the updates have been successful. **The following screen shots illustrate this process:** 1. Start the Evaluate Software Update Deployments cycle manually for testing via console or client (shown below) to trigger the update process. ![Compliance.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/Compliance.jpg?width=683&height=528&name=Compliance.jpg) ![Config Manager.png](https://info.adaptivedge.com/hs-fs/hubfs/Images/Config%20Manager.png?width=414&height=492&name=Config%20Manager.png) 2. View the Software Update Scan Cycle in WUAHandler.log and Scanstate.log (C:\\Windows\\CCM\\Logs) for “Scan completed successfully” and “successfully completed scan” messages. ![log1ab.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/log1ab.jpg?width=691&height=373&name=log1ab.jpg) 3. The Windows Update Handler initiates the Windows Update service against the SCCM SUP. (C:\\Windows\\WindowsUpdate.log) ![log2.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/log2.jpg?width=689&height=252&name=log2.jpg) 4. After the scan is completed, the Updates will begin to install during the maintenance window. Use the UpdatesDeployment.log to view this process (C:\\Windows\\CCM\\Logs\\UpdatesDeployment.log) ![log3.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/log3.jpg?width=691&height=230&name=log3.jpg) 5. If the updates did not run due to a maintenance window conflict, you will see the message below in the UpdatesDeployment.log – “No current service window available to run updates assignment with time required” ![log4.jpg](https://info.adaptivedge.com/hs-fs/hubfs/Images/log4.jpg?width=692&height=346&name=log4.jpg) 6. Content Transfer Manager (ContentTransferManager.log) finds the Distribution Point (or Microsoft location) and downloads the updates. 7. The updates then install and complete. The status will then show a successful deployment on the SCCM server’s Deployment Status. While this post provides a general overview of SCCM tools and best practices for deploying updates, it should be noted that adjustments would be needed to accommodate large deployments. **[Contact the AdaptivEdge team](http://adaptivedge.com/contact-us/)** to discuss your patch management strategy and how you can better leverage SCCM to streamline the update process. ***Written and composed by our *Senior Microsoft System Center Architect, *Jessica Ervin-Hang*** Tags: [adaptivedge](https://info.adaptivedge.com/blog/tag/adaptivedge), [SCCM](https://info.adaptivedge.com/blog/tag/sccm), [software update](https://info.adaptivedge.com/blog/tag/software-update), [Microsoft](https://info.adaptivedge.com/blog/tag/microsoft), [SUP](https://info.adaptivedge.com/blog/tag/sup) [![Sign-up for a FREE Azure Workshop!](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/3330897/780db7b3-ba85-4e30-b67c-b8d572e7a2bb.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/3330897/780db7b3-ba85-4e30-b67c-b8d572e7a2bb) ### We're here to help! We'd love to find out more about the projects and initiatives you're working on to exchange ideas and provide some high-level guidance where we can.  We love learning from others as well as sharing some of our experience and lessons learned.  [Let's talk!](http://adaptivedge.com/contact-us/) ### Subscribe to Email Updates ### Recent Posts ### Posts by Tag - [SharePoint (46)](https://info.adaptivedge.com/blog/tag/sharepoint) - [Microsoft (43)](https://info.adaptivedge.com/blog/tag/microsoft) - [Technology (37)](https://info.adaptivedge.com/blog/tag/technology) - [Office 365 (31)](https://info.adaptivedge.com/blog/tag/office-365) - [adaptivedge (27)](https://info.adaptivedge.com/blog/tag/adaptivedge) - [cybersecurity (25)](https://info.adaptivedge.com/blog/tag/cybersecurity) - [microsoft gold partner (20)](https://info.adaptivedge.com/blog/tag/microsoft-gold-partner) - [ATS (18)](https://info.adaptivedge.com/blog/tag/ats) - [HRIS (18)](https://info.adaptivedge.com/blog/tag/hris) - [Human Resources (18)](https://info.adaptivedge.com/blog/tag/human-resources) - [OneDrive (18)](https://info.adaptivedge.com/blog/tag/onedrive) - [Azure (17)](https://info.adaptivedge.com/blog/tag/azure) - [MS Announcement (15)](https://info.adaptivedge.com/blog/tag/ms-announcement) - [Microsoft Entra (15)](https://info.adaptivedge.com/blog/tag/microsoft-entra) - [data loss prevention (14)](https://info.adaptivedge.com/blog/tag/data-loss-prevention) - [microsoft teams (14)](https://info.adaptivedge.com/blog/tag/microsoft-teams) - [DLP (13)](https://info.adaptivedge.com/blog/tag/dlp) - [Office 2013 (12)](https://info.adaptivedge.com/blog/tag/office-2013) - [Purview (12)](https://info.adaptivedge.com/blog/tag/purview) - [bookings (12)](https://info.adaptivedge.com/blog/tag/bookings) - [exchange (12)](https://info.adaptivedge.com/blog/tag/exchange) - [outlook (12)](https://info.adaptivedge.com/blog/tag/outlook) - [Cloud (10)](https://info.adaptivedge.com/blog/tag/cloud) - [microsoft 365 (8)](https://info.adaptivedge.com/blog/tag/microsoft-365) - [security (8)](https://info.adaptivedge.com/blog/tag/security) - [Enterprise (7)](https://info.adaptivedge.com/blog/tag/enterprise) - [Governance (7)](https://info.adaptivedge.com/blog/tag/governance) - [Private Cloud (7)](https://info.adaptivedge.com/blog/tag/private-cloud) - [Onboarding (6)](https://info.adaptivedge.com/blog/tag/onboarding) - [cyberattack (6)](https://info.adaptivedge.com/blog/tag/cyberattack) - [system center (6)](https://info.adaptivedge.com/blog/tag/system-center) - [IoT (5)](https://info.adaptivedge.com/blog/tag/iot) - [Mobile HR (5)](https://info.adaptivedge.com/blog/tag/mobile-hr) - [PowerShell (5)](https://info.adaptivedge.com/blog/tag/powershell) - [microsoft azure (5)](https://info.adaptivedge.com/blog/tag/microsoft-azure) - [Active Directory (4)](https://info.adaptivedge.com/blog/tag/active-directory) - [Employee Engagement (4)](https://info.adaptivedge.com/blog/tag/employee-engagement) - [Employee Satisfaction (4)](https://info.adaptivedge.com/blog/tag/employee-satisfaction) - [Licensing (4)](https://info.adaptivedge.com/blog/tag/licensing) - [O365 (4)](https://info.adaptivedge.com/blog/tag/o365) - [Secure Score (4)](https://info.adaptivedge.com/blog/tag/secure-score) - [Teams (4)](https://info.adaptivedge.com/blog/tag/teams) - [privileged accounts (4)](https://info.adaptivedge.com/blog/tag/privileged-accounts) - [Adaptive Edge (3)](https://info.adaptivedge.com/blog/tag/adaptive-edge) - [Classification (3)](https://info.adaptivedge.com/blog/tag/classification) - [Collaboration (3)](https://info.adaptivedge.com/blog/tag/collaboration) - [Compliance (3)](https://info.adaptivedge.com/blog/tag/compliance) - [Data (3)](https://info.adaptivedge.com/blog/tag/data) - [E5 (3)](https://info.adaptivedge.com/blog/tag/e5) - [Education (3)](https://info.adaptivedge.com/blog/tag/education) - [IaaS (3)](https://info.adaptivedge.com/blog/tag/iaas) - [Labels (3)](https://info.adaptivedge.com/blog/tag/labels) - [PaaS (3)](https://info.adaptivedge.com/blog/tag/paas) - [Power BI (3)](https://info.adaptivedge.com/blog/tag/power-bi) - [Remote Workforce (3)](https://info.adaptivedge.com/blog/tag/remote-workforce) - [SCCM (3)](https://info.adaptivedge.com/blog/tag/sccm) - [SQL (3)](https://info.adaptivedge.com/blog/tag/sql) - [Search (3)](https://info.adaptivedge.com/blog/tag/search) - [Storage (3)](https://info.adaptivedge.com/blog/tag/storage) - [identity management (3)](https://info.adaptivedge.com/blog/tag/identity-management) - [AI (2)](https://info.adaptivedge.com/blog/tag/ai) - [AI & Copilot (2)](https://info.adaptivedge.com/blog/tag/ai-copilot) - [API (2)](https://info.adaptivedge.com/blog/tag/api) - [Autmoation (2)](https://info.adaptivedge.com/blog/tag/autmoation) - [Azure AD (2)](https://info.adaptivedge.com/blog/tag/azure-ad) - [BI (2)](https://info.adaptivedge.com/blog/tag/bi) - [Backup & Recovery (2)](https://info.adaptivedge.com/blog/tag/backup-recovery) - [GitHub (2)](https://info.adaptivedge.com/blog/tag/github) - [IT Administration (2)](https://info.adaptivedge.com/blog/tag/it-administration) - [Intune (2)](https://info.adaptivedge.com/blog/tag/intune) - [Microsoft 365 Updates (2)](https://info.adaptivedge.com/blog/tag/microsoft-365-updates) - [Microsoft Dynamics (2)](https://info.adaptivedge.com/blog/tag/microsoft-dynamics) - [Microsoft Graph (2)](https://info.adaptivedge.com/blog/tag/microsoft-graph) - [PAWS (2)](https://info.adaptivedge.com/blog/tag/paws) - [People Analytics (2)](https://info.adaptivedge.com/blog/tag/people-analytics) - [Performance (2)](https://info.adaptivedge.com/blog/tag/performance) - [SKU (2)](https://info.adaptivedge.com/blog/tag/sku) - [Safety (2)](https://info.adaptivedge.com/blog/tag/safety) - [Security & Compliance (2)](https://info.adaptivedge.com/blog/tag/security-compliance) - [Server (2)](https://info.adaptivedge.com/blog/tag/server) - [Windows Defender ATP (2)](https://info.adaptivedge.com/blog/tag/windows-defender-atp) - [Workflow Automation (2)](https://info.adaptivedge.com/blog/tag/workflow-automation) - [Zero Trust (2)](https://info.adaptivedge.com/blog/tag/zero-trust) - [copilot studio (2)](https://info.adaptivedge.com/blog/tag/copilot-studio) - [microsoft ignite (2)](https://info.adaptivedge.com/blog/tag/microsoft-ignite) - [Agentic AI (1)](https://info.adaptivedge.com/blog/tag/agentic-ai) - [Artificial Intelligence (1)](https://info.adaptivedge.com/blog/tag/artificial-intelligence) - [Attack Surface (1)](https://info.adaptivedge.com/blog/tag/attack-surface) - [BYOL (1)](https://info.adaptivedge.com/blog/tag/byol) - [Business (1)](https://info.adaptivedge.com/blog/tag/business) - [Business Requirements (1)](https://info.adaptivedge.com/blog/tag/business-requirements) - [CASB (1)](https://info.adaptivedge.com/blog/tag/casb) - [CRM (1)](https://info.adaptivedge.com/blog/tag/crm) - [Cloud Computing (1)](https://info.adaptivedge.com/blog/tag/cloud-computing) - [Coexistence (1)](https://info.adaptivedge.com/blog/tag/coexistence) - [Copilot Cowork (1)](https://info.adaptivedge.com/blog/tag/copilot-cowork) - [Customer Relationship Management (1)](https://info.adaptivedge.com/blog/tag/customer-relationship-management) - [DBaaS (1)](https://info.adaptivedge.com/blog/tag/dbaas) - [DMZ (1)](https://info.adaptivedge.com/blog/tag/dmz) - [Datacenter (1)](https://info.adaptivedge.com/blog/tag/datacenter) - [ERP (1)](https://info.adaptivedge.com/blog/tag/erp) - [Enterprise Visual Studio (1)](https://info.adaptivedge.com/blog/tag/enterprise-visual-studio) - [Group Writeback (1)](https://info.adaptivedge.com/blog/tag/group-writeback) - [HRSM (1)](https://info.adaptivedge.com/blog/tag/hrsm) - [Hybrid (1)](https://info.adaptivedge.com/blog/tag/hybrid) - [Infrastructure (1)](https://info.adaptivedge.com/blog/tag/infrastructure) - [LAPS (1)](https://info.adaptivedge.com/blog/tag/laps) - [Millennials (1)](https://info.adaptivedge.com/blog/tag/millennials) - [OMS (1)](https://info.adaptivedge.com/blog/tag/oms) - [OSD (1)](https://info.adaptivedge.com/blog/tag/osd) - [Offboarding (1)](https://info.adaptivedge.com/blog/tag/offboarding) - [Office 365 Groups (1)](https://info.adaptivedge.com/blog/tag/office-365-groups) - [PXE (1)](https://info.adaptivedge.com/blog/tag/pxe) - [Payroll (1)](https://info.adaptivedge.com/blog/tag/payroll) - [Performance Reviews (1)](https://info.adaptivedge.com/blog/tag/performance-reviews) - [Recruiting (1)](https://info.adaptivedge.com/blog/tag/recruiting) - [Requirements Gathering (1)](https://info.adaptivedge.com/blog/tag/requirements-gathering) - [SUP (1)](https://info.adaptivedge.com/blog/tag/sup) - [SaaS (1)](https://info.adaptivedge.com/blog/tag/saas) - [Servers (1)](https://info.adaptivedge.com/blog/tag/servers) - [Skype (1)](https://info.adaptivedge.com/blog/tag/skype) - [Succession Planning (1)](https://info.adaptivedge.com/blog/tag/succession-planning) - [TEM (1)](https://info.adaptivedge.com/blog/tag/tem) - [Training and Development (1)](https://info.adaptivedge.com/blog/tag/training-and-development) - [Travel and Expense (1)](https://info.adaptivedge.com/blog/tag/travel-and-expense) - [UEBA (1)](https://info.adaptivedge.com/blog/tag/ueba) - [Unified Groups (1)](https://info.adaptivedge.com/blog/tag/unified-groups) - [UserVoice (1)](https://info.adaptivedge.com/blog/tag/uservoice) - [VM (1)](https://info.adaptivedge.com/blog/tag/vm) - [Virtualization (1)](https://info.adaptivedge.com/blog/tag/virtualization) - [Windows 10 (1)](https://info.adaptivedge.com/blog/tag/windows-10) - [custom scripts (1)](https://info.adaptivedge.com/blog/tag/custom-scripts) - [digital transformation (1)](https://info.adaptivedge.com/blog/tag/digital-transformation) - [disk utilization (1)](https://info.adaptivedge.com/blog/tag/disk-utilization) - [geotagging (1)](https://info.adaptivedge.com/blog/tag/geotagging) - [identity (1)](https://info.adaptivedge.com/blog/tag/identity) - [identity perimeter (1)](https://info.adaptivedge.com/blog/tag/identity-perimeter) - [mobile workforces (1)](https://info.adaptivedge.com/blog/tag/mobile-workforces) - [orchestrator (1)](https://info.adaptivedge.com/blog/tag/orchestrator) - [phishing (1)](https://info.adaptivedge.com/blog/tag/phishing) - [scom (1)](https://info.adaptivedge.com/blog/tag/scom) - [sharing (1)](https://info.adaptivedge.com/blog/tag/sharing) - [software update (1)](https://info.adaptivedge.com/blog/tag/software-update) - [windows automation (1)](https://info.adaptivedge.com/blog/tag/windows-automation) - [windows server (1)](https://info.adaptivedge.com/blog/tag/windows-server) - [workgroup (1)](https://info.adaptivedge.com/blog/tag/workgroup) see all ### OUR COMPANY As a Microsoft Gold Partner, AdaptivEdge helps customers evaluate various product options from a financial perspective as well as from a business and technical perspective. ### LINKS - [Home](http://adaptivedge.com/) - [Company](http://adaptivedge.com/about/) - [Expertise](http://adaptivedge.com/expertise/) - [Services](http://adaptivedge.com/services/) - [News & Events](http://adaptivedge.com/news-events/) - [Blog](http://adaptivedge.com/blog/) - [Contact](http://adaptivedge.com/contact-us/) ### Latest Posts ### SIGN-UP FOR OUR EMAIL LIST Sign-up below for updates about AdaptivEdge today! ### Footer Newsletter - - - Copyright © 2026. AdaptivEdge, LLC. All rights reserved. Designed by [Bound-by Marketing](http://www.boundbymarketing.com) ![](https://secure.perk0mean.com/167743.png)