Sherry, I was just about to ask you for your CI. So thanks for this!
Interestingly enough, I downloaded the latest MSI, created a package and it upgraded some test boxes from version 13 to version 16 (latest). Installed while browsers were opened and no reboot, which is what I was really wanting! The mms.cfg file shows: AutoUpdateDisable=1 SilentAutoUpdateEnable=0 Which is from my previous deployment where I configured the mms.cfg file manually. The big change for me is seeing if someone actually installs the update through Adobe’s website it should replace that setting to allow updates, etc.. So I am not sure why I would need SCUP to do this, I don’t know what the benefits are now that I can just take the .msi provided. Kevin From: [email protected] [mailto:[email protected]] On Behalf Of Sherry Kissinger Sent: Wednesday, February 04, 2015 12:19 PM To: [email protected] Subject: Re: [mssms] RE: Adobe Updates and SCUP question In case someone wants them... Attached are the Configuration Items we've got deployed to workstations regarding FlashPlayer. The one most people would care about (I think) is the mms.cfg one. If you deploy that CI (or all 3) AND in your baseline when you deploy it you check that box about "remediate", for the mms.cfg one, if... there is a folder for macromed\flash, it'll check if there is an mms.cfg file in there. If there is one (it doesn't look inside it), it's compliant. If there isn't one, remediation will create one (the right format, UTF-8) and put in the lines that are in that remediate script. (below). I don't know what some of them are for--I got these options from our packaging team who had been (until scup) packaging flashplayer with a mms.cfg file. So I'm guessing they've vetted these settings over the years. But of course everyone is different. If you have different values you need, modify the remediation script to match what you need. AutoUpdateDisable=1 SilentAutoUpdateEnable=0 DisableProductDownload=1 LocalStorageLimit=5 If it gives people a warm fuzzy... the baseline says it's 99% compliant to just shy of 200k workstations. and I do see a few thousand were remediated (created) the mms.cfg file because they were missing it. Looks like the 'Scheduled Task" one was also there on those same machines, and smacked gone by the CI. As usual with strange ConfigItems you pick up from random locations, like an email list <grin>... I suggest deploying this in Monitor only for a day or three, and start out deploying it to just a test collection of a few boxes; just to see if your environment is affected and if you WANT to deploy it with remediation enabled. It's your environment... "trust, but verify" that what this does is what you want it to do. On Wednesday, February 4, 2015 10:56 AM, Justin Chalfant <[email protected]<mailto:[email protected]>> wrote: You could possibly use WSUS Package Publisher: http://wsuspackagepublisher.codeplex.com/ This is a *Third Party Tool* that allows you to publish third party updates to WSUS (Similar to SCUP) and also view and approve those updates directly in WSUS. Thanks, Justin Chalfant Premier Field Engineer – Configuration Manager Public Sector Microsoft Services Tel : (303) 846-2701 Email: [email protected]<mailto:[email protected]> If you have any feedback about my work, please let either myself or my manager Rusty Gray know at [email protected]<mailto:[email protected]> From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Jason Sandys Sent: Wednesday, February 4, 2015 9:25 AM To: [email protected]<mailto:[email protected]> Subject: Re: [mssms] RE: Adobe Updates and SCUP question No. SCUP is for ConfigMgr only. So you have ConfigMgr but still use WSUS proper? See http://ccmexec.com/2012/08/top-11-reasons-why-you-should-use-configmgr-2012-for-managing-software-updates/ J From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> on behalf of Matt Wilkinson <[email protected]<mailto:[email protected]>> Sent: Wednesday, February 4, 2015 9:42 AM To: [email protected]<mailto:[email protected]> Subject: RE: [mssms] RE: Adobe Updates and SCUP question Can you use SCUP with plain old WSUS? We don’t use sccm’s sup . From: Sherry Kissinger [mailto:[email protected]] Sent: 04 February 2015 15:39 To: [email protected]<mailto:[email protected]> Subject: Re: [mssms] RE: Adobe Updates and SCUP question 50% failure? wow--flashplayer via SCUP for us isn't an issue at all. Seems to work just fine. On Wednesday, February 4, 2015 9:36 AM, "Enley, Carl" <[email protected]<mailto:[email protected]>> wrote: Wow, I use SCUP via Shavlik along with SCCM 2007 and I am nearly 100% on 3000 end points. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Marcum, John Sent: Wednesday, February 04, 2015 10:20 AM To: '[email protected]' Subject: [mssms] RE: Adobe Updates and SCUP question I use SCUP for Adobe flash updates. I get at least 50% failure rate each month. I hate Adobe! From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Johnston Sent: Wednesday, February 04, 2015 8:00 AM To: '[email protected]' Subject: [mssms] Adobe Updates and SCUP question Currently we are poised to use Secunia for Adobe updates, but because they have no uninstall or upgrade feature because the vendor does not, I was wondering if anyone uses SCUP for Adobe updates (Flash, Reader, Shockwave) and are able to update these products without having to run an uninstaller first, then reboot then install the latest version. We use SCCM 2012 R2 now, and I could just create a package that includes running the Flash uninstaller first then run the latest installer created by Secunia and then copy over the proper mms.cfg file, but I was hoping for a more automated feature. I know Adobe does not make their products fun or easy. I believe I read that using the Adobe MSI does in fact uninstall flash as part of it’s install… Thanks, Kevin Johnston Confidentiality Notice: This e-mail is from a law firm and may be protected by the attorney-client or work product privileges. If you have received this message in error, please notify the sender by replying to this e-mail and then delete it from your computer. _____________________________________________________________________ This email has been scanned by the MessageLabs Email Security System on behalf of Leeds College of Building. For more information please visit http://www.symanteccloud.com/ _____________________________________________________________________ _____________________________________________________________________ This email has been scanned by the MessageLabs Email Security System on behalf of Leeds College of Building. For more information please visit http://www.symanteccloud.com/ _____________________________________________________________________
