• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 7587
  • Last Modified:

How to handle superceded updates in WSUS?

Hi,

I need help in understanding basics principles of wsus:

1. I see lots of updates marked as 'This update is superseded by another update...' What a m I exactly supposed to do? Should I decline the superseded updates and accept the superseding update? Why does WSUS not do this automatically? How do i find the superseding update easily in the huge list?

2. What is the best practice? Do I have to approve updates only when they are detected as needed by computers or should I approve them anyway?

3. I have the default automatic approval rule that approves critical , definition and security updates to all computers. When will it run? It does not seem to be working, how do I verify?
0
smtwkla
Asked:
smtwkla
  • 4
  • 2
2 Solutions
 
Hedley PhillipsOwnerCommented:
1) As there are so many of them I always just allow them and know that they will be superceded by a later update.

You can use the Server Cleanup Wizard to clean up superceded updates at a later date:
http://technet.microsoft.com/en-us/library/cc708578.aspx

2) I approve updates on a weekly basis to a test group containing our secondary server, a laptop and a desktop. If none of these reports a problem in 7 days I then approve those updates for the entire domain. This is on a rolling basis.

3) I don't use any auto approval. We once had a server down for 3 days because of an update so everything is now controlled by us.


0
 
smtwklaAuthor Commented:
Mr.Madcowz, thanks for the info.

"1) As there are so many of them I always just allow them and know that they will be superceded by a later update."

What will happen if I approve a superceeded update AND the superceeding update? Will both get at the client? Is it possible / required for me to detect it and decline the superceeded update?
0
 
smtwklaAuthor Commented:
When viewing superceeded updates, WSUS Warns me "This update is superceeded by another update. ...we recommend that you make sure it is no longed required by computers. To do so, approve the superceeding updates first."

What do they mean? When there is a superceeding update, isn't it enough if the superceeding update is approved? Why bother with the superceeded update?

Again, how do I make out which update superceeds which? By the KB Number?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Hedley PhillipsOwnerCommented:
I really don't bother. I just approve them and let WSUS work it out. Seems to go ok.

So if there are 2 updates and another supercedes it I will approve them all and have always assumed that WSUS makes sure that the latest one is the one that gets sent to the clients.

I suppose you could approve just 2 updates (one old, one new) and see which gets sent out to a test dekstop.
0
 
smtwklaAuthor Commented:
To quote from WSUS 3.0 Operations Guide Microsoft Windows Server Update Services 3.0 SP1 Operations Guide (http://go.microsoft.com/fwlink/?LinkId=86697)::

"In an individual update's detail pane, an informational icon and a message at the top indicates that it either supersedes or is superseded by another update. In addition, you can determine which updates supersede or are superseded by the update by looking at the Updates superseding this update and Updates superseded by this update entries in the Additional Details section of the Properties."
 
"WSUS does not automatically decline superseded updates, and it is recommended that you do not assume that superseded updates should be declined in favor of the new, superseding update. Before declining a superseded update, make sure that it is no longer needed by any of your client computers.

The following are examples of scenarios in which you might need to install a superseded update:

"      If a superseding update supports only newer versions of an operating system, and some of your client computers run earlier versions of the operating system.
"      If a superseding update has more restricted applicability than the update it supersedes, which would make it inappropriate for some client computers.
"      If an update no longer supersedes a previously released update because of new changes. It is possible that through changes at each release, an update no longer supersedes an update it previously superseded in an earlier version. In this scenario, you will still see a message about the superseded update, even though the update that supersedes it has been replaced by an update that does not."

The doc also lists microsoft's recommended update procedure.
0
 
smtwklaAuthor Commented:
ok
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now