Resetting SCCM Agent if patch installation fails

From time to time, a ticket will be created in regards to System Patches failing in an SCCM environment. To fix this, there are really only two major steps:

  1. Rename the C:\Windows\SoftwareDistribution folder to SoftwareDistribution.old (stop Windows Update service before renaming, then restart the service).
  2. Rename C:\Windows\System32\catroot2 to catroot2.old (stop the Cryptography service before renaming, then restart the service).

After this is done, run these actions from the configuration manager:

  1. Discovery Data Collection Cycle
  2. Software Updates Deployment Evaluation Cycle
  3. Software Updates Scan Cycle

The procedure above has taken care of the issue pretty reliably. If the updates still don’t install properly, you may have to download the specific updates and install them manually.

Mike Erps

Michael Erps currently provides IT support and consulting to gov’t contractors in D.C. He is also interested in Internet Marketing and helping others build the online presence they are looking for. You can find him on