I'm using SCCM 1702, which is the latest version of SCCM available. I have installed it on a brand new Server 2016 box just this week. I have deployed clients and done some test software deployments without problems. All the installed roles are working properly. Everything is good except the auto deployment rule I set up for AV definitions.

I built the rule from the template that Microsoft provides, but when I run it, I get the following error in the console:

SCCM Console

Looking in the ruleengine.log file, I see the following errors:

CMTrace Log

I have of course Googled this problem, and every single link that comes up says that the permissions are wrong on the \UpdateServicesPackages directory. However, I have been over both the share and NTFS permissions on that directory and they are fine.

Here are the permissions on that directory:


Lastly, I have configured an account svc-SCCM as the credentials to be used when connecting to the WSUS server (from the Admin node -> Site System Roles -> Software Update Point). That account is a domain admin, and I have verified I can connect to that share using it from a remote PC.

Software Update Point Properties

Clearly there is not a permissions problem. I can also connect to the WSUS console remotely using that svc-SCCM account, and the WSUS server itself is not reporting any problems in the event logs. Clients are checking into it and reporting status just fine. I'm also not having sync issues either. SCCM is syncing the update catalog fine, and I can see 1000+ updates in the All Software Updates node. And yes, I have confirmed that this is the correct path for the deployment package.

So what gives?

  • Did you check that if you can successfully download the update binaries manually? Also, if you deploy updates not using ADR, will it success or not? – Longfei Sun - MSFT Apr 13 '17 at 10:59

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.