B. Operating System where the Configuration Manager console is installed must be a 64-bit version of one of the following (excludes Server Core and Nano):
Windows Server 2019
Windows Server 2016
Windows Server 2012 R2
Windows Server 2012
Windows Server 2008 R2 SP1
Windows 10 Pro or Enterprise Edition
Windows 7 SP1
C. Microsoft Visual C++ 2015-2019 Redistributable (x86 and x64)
If either of these requirements are missing, they will be installed during the installation of Lenovo Patch.
D. .NET Framework 4.8 or later
If this requirement is missing, .NET Framework 4.8 will be installed during the installation of Lenovo Patch. This install will require a reboot.
E. Windows Server Update Services (WSUS) client:
If Lenovo Patch for SCCM is installed on the Primary Configuration Manager server and the server operating system is either Windows Server 2016, Windows Server 2012 R2, or Windows Server 2012, then the WSUS API and the PowerShell cmdlets features must be installed and enabled.
If Lenovo Patch for SCCM is installed on a remote Windows 10, Windows 8.1, or Windows 7 SP1 computer requires the associated version of Remote Server Administration Tools (RSAT) to be installed and enabled.
If the primary WSUS server is running WSUS 3.0 SP2, then the WSUS 3.0 SP2 Administration Console must be installed on the same machine as Lenovo Patch. Patches KB2720211 and KB2734608 must be applied to both the WSUS server and the Configuration Manager Console machines.
F. Shared Settings
Each user taking advantage of the Shared Settings feature requires access to a SQL Server database and must have read/write permissions to the database. Any version of Microsoft SQL Server supported by the currently installed Microsoft SCCM version is valid.
G. Scheduled Tasks
If there is intention to automatically publish updates using a recurring scheduled task, then the Microsoft Task Scheduler service must be.
The user executing the scheduled task must be granted Log on as a batch job rights.
If there is intention to receive alert notifications via email, then SCCM must be configured to allow email notifications.For more information, refer to the Managing Alerts section of the Lenovo Patch for SCCM 2.4 User Guide at the beginning of this article.
Lenovo Patch for SCCM activation code must be entered when purchased or be activated via the trial activation option.
J. User Rights
Be a member of theWSUS Administrators group on the WSUS server.
The user account must be assigned to the Full Administrator Security Role in the Configuration Manager application.
HaveLog on as a batch jobrights
Be assigned to theAll instances of the objects that are related to the assigned security rolessecurity scope.
In addition, if the WSUS Server is remote, the user must be a member of the local administrators group on the WSUS Server.
K. Client Machines
Each of your client machines must meet the following requirements to deploy non-Microsoft updates distributed by a WSUS server:
Must contain a copy of the code signing certificate in the appropriate certificate stores
Must have enabled theAllow signed updates from an intranet Microsoft update service locationpolicy setting.
M. Federal Information Processing Standard (FIPS) environments
When operating in a FIPS environment, the console must be configured as a FIPS-compliant machine before Lenovo Patch for SCCM is installed. If FIPS is enabled after the installation, Lenovo Patch for SCCM must be reinstalled.