WSUS - downloading updates to clients

Posted on 2006-05-05
Last Modified: 2010-04-18

Windows 2000 server STD
domain has 500+ PC's and 37 servers

Hellos experts

i've implemented a WSUS server on our Domain. i've split the Computer groups into floors  " 1st, 2nd, 3rd etc " and also have a "servers" group for all the servers, Also a "test group" for testing the WSUS.

in the "approve for Detection" and "Approve for Install" i have the Test group selected and nothing else.

one the first night of running.. ( last night ) it rolled out and installed updates on some of the servers and most of the PC's!!!

i'm sure this should of happened.. could anyone suggest any reasons why this might of happened??
I've excluded these reasons:
-PC's and servers dont have access to the web to get updates
-checked and double checked the wsus server settings

i've had to run a script on all the PC's and servers to prevent this happening again and also remove from AD the ADM file.

any help or advice would be greatly appreciated..

many thanks in advance!!

Question by:hb21l6
    LVL 2

    Author Comment

    sorry .. this line "i'm sure this should of happened.. " sould of said "i'm sure this should not of happened.. "

    LVL 32

    Expert Comment

    by:Robberbaron (robr)
    can you check what updates the PC in the other group ARE currently authorised for ?

    perhaps some updates were authorized for the "All Computers" group.

    I'll have to look tomorrow at my server to see if authorising by groups is a valid setting.
    (Have to admit to having only 1 group.....)
    LVL 2

    Author Comment


    i've set the approval to 'install' for "all computers" .. I thought they needed to be appoved for all computers and then distributed was controlled by the PC groups.

    geeze - this is turning into an admin nightmare!! lol

    Can you confirm that the updates will go out if ive set the updates to "all computers" or are they controlled by the groups??

    LVL 32

    Accepted Solution

    if you Approve for All Computers then they definely get Installed on all computers.

    ie Approve = approval to download & install.  The distribution is automatic.

    I set mine to Detect generally and then only Approve/Install those I can do some review via google on.
    LVL 2

    Author Comment

    many thanks.

    I've only approved on the test group and set the rest to not approved. and it worked like a treat.

    many thanks robberbaron...

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Suggested Solutions

    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now