Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

How to handle superceded updates in WSUS?

Posted on 2008-10-30
6
6,276 Views
Last Modified: 2016-09-07
Hi,

I need help in understanding basics principles of wsus:

1. I see lots of updates marked as 'This update is superseded by another update...' What a m I exactly supposed to do? Should I decline the superseded updates and accept the superseding update? Why does WSUS not do this automatically? How do i find the superseding update easily in the huge list?

2. What is the best practice? Do I have to approve updates only when they are detected as needed by computers or should I approve them anyway?

3. I have the default automatic approval rule that approves critical , definition and security updates to all computers. When will it run? It does not seem to be working, how do I verify?
0
Comment
Question by:smtwkla
  • 4
  • 2
6 Comments
 
LVL 14

Assisted Solution

by:Hedley Phillips
Hedley Phillips earned 250 total points
ID: 22848941
1) As there are so many of them I always just allow them and know that they will be superceded by a later update.

You can use the Server Cleanup Wizard to clean up superceded updates at a later date:
http://technet.microsoft.com/en-us/library/cc708578.aspx

2) I approve updates on a weekly basis to a test group containing our secondary server, a laptop and a desktop. If none of these reports a problem in 7 days I then approve those updates for the entire domain. This is on a rolling basis.

3) I don't use any auto approval. We once had a server down for 3 days because of an update so everything is now controlled by us.


0
 
LVL 1

Author Comment

by:smtwkla
ID: 22853373
Mr.Madcowz, thanks for the info.

"1) As there are so many of them I always just allow them and know that they will be superceded by a later update."

What will happen if I approve a superceeded update AND the superceeding update? Will both get at the client? Is it possible / required for me to detect it and decline the superceeded update?
0
 
LVL 1

Author Comment

by:smtwkla
ID: 22853448
When viewing superceeded updates, WSUS Warns me "This update is superceeded by another update. ...we recommend that you make sure it is no longed required by computers. To do so, approve the superceeding updates first."

What do they mean? When there is a superceeding update, isn't it enough if the superceeding update is approved? Why bother with the superceeded update?

Again, how do I make out which update superceeds which? By the KB Number?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 14

Expert Comment

by:Hedley Phillips
ID: 22857757
I really don't bother. I just approve them and let WSUS work it out. Seems to go ok.

So if there are 2 updates and another supercedes it I will approve them all and have always assumed that WSUS makes sure that the latest one is the one that gets sent to the clients.

I suppose you could approve just 2 updates (one old, one new) and see which gets sent out to a test dekstop.
0
 
LVL 1

Accepted Solution

by:
smtwkla earned 0 total points
ID: 22859916
To quote from WSUS 3.0 Operations Guide Microsoft Windows Server Update Services 3.0 SP1 Operations Guide (http://go.microsoft.com/fwlink/?LinkId=86697)::

"In an individual update's detail pane, an informational icon and a message at the top indicates that it either supersedes or is superseded by another update. In addition, you can determine which updates supersede or are superseded by the update by looking at the Updates superseding this update and Updates superseded by this update entries in the Additional Details section of the Properties."
 
"WSUS does not automatically decline superseded updates, and it is recommended that you do not assume that superseded updates should be declined in favor of the new, superseding update. Before declining a superseded update, make sure that it is no longer needed by any of your client computers.

The following are examples of scenarios in which you might need to install a superseded update:

"      If a superseding update supports only newer versions of an operating system, and some of your client computers run earlier versions of the operating system.
"      If a superseding update has more restricted applicability than the update it supersedes, which would make it inappropriate for some client computers.
"      If an update no longer supersedes a previously released update because of new changes. It is possible that through changes at each release, an update no longer supersedes an update it previously superseded in an earlier version. In this scenario, you will still see a message about the superseded update, even though the update that supersedes it has been replaced by an update that does not."

The doc also lists microsoft's recommended update procedure.
0
 
LVL 1

Author Comment

by:smtwkla
ID: 22860030
ok
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SBS 2011 Backup Drive 8 74
I need a simple SMTP solution for a printer/scanner 1 31
powershell script 9 64
Run Windows Server from USB 2 17
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

829 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question