Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


WSUS - downloading updates to clients

Posted on 2006-05-05
Medium Priority
Last Modified: 2010-04-18

Windows 2000 server STD
domain has 500+ PC's and 37 servers

Hellos experts

i've implemented a WSUS server on our Domain. i've split the Computer groups into floors  " 1st, 2nd, 3rd etc " and also have a "servers" group for all the servers, Also a "test group" for testing the WSUS.

in the "approve for Detection" and "Approve for Install" i have the Test group selected and nothing else.

one the first night of running.. ( last night ) it rolled out and installed updates on some of the servers and most of the PC's!!!

i'm sure this should of happened.. could anyone suggest any reasons why this might of happened??
I've excluded these reasons:
-PC's and servers dont have access to the web to get updates
-checked and double checked the wsus server settings

i've had to run a script on all the PC's and servers to prevent this happening again and also remove from AD the ADM file.

any help or advice would be greatly appreciated..

many thanks in advance!!

Question by:hb21l6
  • 3
  • 2

Author Comment

ID: 16613783
sorry .. this line "i'm sure this should of happened.. " sould of said "i'm sure this should not of happened.. "

LVL 33

Expert Comment

by:Robberbaron (robr)
ID: 16614087
can you check what updates the PC in the other group ARE currently authorised for ?

perhaps some updates were authorized for the "All Computers" group.

I'll have to look tomorrow at my server to see if authorising by groups is a valid setting.
(Have to admit to having only 1 group.....)

Author Comment

ID: 16614206

i've set the approval to 'install' for "all computers" .. I thought they needed to be appoved for all computers and then distributed was controlled by the PC groups.

geeze - this is turning into an admin nightmare!! lol

Can you confirm that the updates will go out if ive set the updates to "all computers" or are they controlled by the groups??

LVL 33

Accepted Solution

Robberbaron (robr) earned 480 total points
ID: 16614270
if you Approve for All Computers then they definely get Installed on all computers.

ie Approve = approval to download & install.  The distribution is automatic.

I set mine to Detect generally and then only Approve/Install those I can do some review via google on.

Author Comment

ID: 16614341
many thanks.

I've only approved on the test group and set the rest to not approved. and it worked like a treat.

many thanks robberbaron...

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
How can you see what you are working on when you want to see it while you to save a copy? Add a "Save As" icon to the Quick Access Toolbar, or QAT. That way, when you save a copy of a query, form, report, or other object you are modifying, you…

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question