If you are using WSUS they will propagate but not immediately, it will take some time for all of them to go down the chain.
You can definitely approve/decline updates for individual computers/groups. Of course this does take some time to propagate. If someone wants a certain update immediately, you can install it using the download package from download.microsoft.com usually.
I have noticed that if you are controlling the Windows updates functionality through GP you will not be able to use the Windows Update site. Sometimes if you have a computer that isn't attached to the network often (such as a notebook) you can still run the Windows Update tool by disjoining the domain, using the Windows Update site then rejoining the domain, if you have a situation like that.
Main Topics
Browse All Topics





by: inorbitalPosted on 2009-09-08 at 15:03:44ID: 25286557
So you're running WSUS?
1.) I think the more important question is are you trying to setup an environment where you have the time to monitor windows updates & strictly control release dates & test updates prior to releasing to clients?
2.) Yes you can approve individual machines or groups of machines which you can define