Wednesday, January 6, 2016

SCCM 2012x ADR vs SCCM 1511 ADR

The why & how of this posting
Even though SCCM 1511 has almost the same ‘look & feel’ compared to SCCM 2012x, there are quite some differences. One of those differences is the way Automatic Deployment Rules (ADR) are deployed. Where as ADRs in SCCM 2012x have a one on one relationship with a Deployment, in SCCM 1511 this is changed into a one to many (Deployments) relationship.

This makes sense, since many times one ADR can serve multiple Collections. So why create yet another ADR? And yes, in SCCM 2012x one could work around the one-to-one relationship, by deploying the Software Update Group (SUG), created by the ADR, to other Collections as well. But this approach was pushing the boundaries of the SCCM UI and resulting in a messy overview which made it hard to see to what Collections a particular ADR was targeted. Because of this one could by mistake create multiple ADRs with the same functionality, ‘hitting’ the same Collections multiple times…

So in SCCM 1511 (and it’s future successors) this has been changed. As a result, many of the screens related to the ADR in SCCM 1511 are different compared to SCCM 2012x. I’ve noticed that these changes do raise some questions by people used to the SCCM 2012x ADRs.

Hence this posting in order to show the differences between both versions and the explanation behind it. For this purpose I’ve made two ADRs. One in my SCCM 2012 R2 SP1 test lab, titled SCCM 2012R2 ADR. And another in my SCCM 1511 test lab, titled SCCM 1511 ADR.

Properties screens
When an ADR is created and it’s properties are viewed, you’ll notice right away some major differences between a SCCM 2012x based ADR:
image

The yellow highlighted tabs are the ones which are present in the SCCM 1511 based ADR as well:
image

But where are the tabs Deployment Schedule, User Experience & Download Settings? These are moved to a new ADR entity in the SCCM 1511 Console, titled Deployment Settings, more about that later in this posting.

When looking in the related SCCM Consoles (\Software Library\Overview\Software Updates\Automatic Deployment Rules), you’ll notice some differences.

SCCM 1511:
image
Notice the yellow highlighted tab Deployment Settings, which is new in SCCM 1511.

When that tab is selected, you’ll see the Collections to which the selected ADR is deployed to:
image

In SCCM 2012x the tab Deployment Settings is lacking:
image

SCCM 1511 only: Deployment Properties screen
When opening the Properties screen of the selected Deployment (in this example for the Collection ‘All Mobile Devices’), you’ll find the previous missing tabs in the Properties screen of the ADR:
image
So there are the tabs Deployment Schedule, User Experience & Download Settings.

Explanation
This makes perfectly sense, because in SCCM 1511 the relationship between an ADR and a Deployment is one to many. So the properties related to the specifics of a Deployment are gone from the basic properties screen of the ADR itself and brought into the new ADR entity, Deployment Settings.

This enables you to deploy a single ADR to other Collections, each with it’s specific required settings, like (but not limited to), to automatically reboot or not the devices related to the specific Collection when the updates are installed, what to do when the installation deadline is reached and so on.

What happens when an existing SCCM 1511 ADR is deployed to another Collection?
Let’s target the already created ADR SCCM 1511 ADR to another Collection, Windows Server 2012 for example.

This can be done in two ways. Select the ADR you want to deploy to another Collection and right click it. You’ll see that the option  Add Deployment is present. Click it and follow the wizard.
image

Or select the ADR you want to deploy to another Collection and click on the button Add Deployment and follow the wizard:
image

And:
image

In SCCM 2012x these options are lacking:
image

And:
image

As you can see in the SCCM 1511 Console (\Software Library\Overview\Software Updates\Automatic Deployment Rules), the new Deployment is succesfully added to the ADR SCCM 1511 ADR:
image

Behaviour of a SCCM 1511 ADR with added Deployments. Sometimes a bit erratic?
It’s important to know how a SCCM 1511 based ADR ‘responds’ when an additional Deployment is added, or better, how it show’s itself in the SCCM Console under Software Update Groups (\Software Library\Overview\Software Updates\Software Update Groups).

Of course, it depends how the ADR is set in relation to Software Update Groups. In this example, the default value (Add to an existing Software Update Group) is used:
image

In the same example the ADR SCCM 1511 ADR is targeted against the Collection All Mobile Devices, and saved. Before it’s first run the same ADR is deployed to another Collection as well, Windows Server 2012:
image

All is set now. Let’s run the ADR and check out the Software Update Groups view in the SCCM 1511 Console:
image
TWO SUGs are created?! Let’s check the details of each SUG, since the ADR is set to Add to an existing Software Update Group

First SUG in the row for ADR SCCM 1511 ADR:
image

Second SUG in the row for ADR SCCM 1511 ADR:
image

As you can see, per Collection a new SUG is created. Let’s see what happens when the ADR has run for a second time.

First SUG in the row for ADR SCCM 1511 ADR:
image
Apparently this ADR is used now for both Deployments.

Let’s check the second SUG in the row for ADR SCCM 1511 ADR:
image
Okay. This SUG isn’t used anymore by the ADR after it’s initial run. That’s a bit confusing.

And it can get even a bit more confusing when creating a ADR, deployed initially against ONE Collection only which has run at least one time. With the default setting of the ADR (Add to an existing Software Update Group), only ONE SUG will be created.

When the ADR is modified in order to be deployed against other Collections as well, the SUG (after the ADR has run) will only show the original Collection it was initially deployed to…

Recap
It’s a good thing that an ADR can be deployed against multiple Collections. In SCCM 2012x this could be done as well but it took much more interaction and was prone to errors because it wasn’t easy to be found back in the Console that a single ADR had multiple deployments.

So far the good news. However, when deploying a SCCM 1511 based ADR to multiple Collections the same SCCM 1511 Console might throw some strange results, so be careful and double check it. Not only on the SCCM Console side of it all, but also on the side of the members of the related Collections to which the ADR is deployed to.

1 comment:

David Guirl said...

Hi, this is a great writeup and you explain a lot of the new changes very well!!

I am curious about one thing, now that I have some ADR's with multiple deployments. How do I run an ADR but selectively choose which Deployments will actually update and reboot machines? I am troubleshooting one Deployment in particular that did not work, but the other deployments did. So i don't want to re-run all of the deployments; just the one that isn't working. Any ideas? I see that I can change the "Enable this deployment after the rule runs" option for each deployment, but that has a seemingly vague connotation.

Thanks in advance!