Solved

How to handle superceded updates in WSUS?

Posted on 2008-10-30
6
6,527 Views
Last Modified: 2016-09-07
Hi,

I need help in understanding basics principles of wsus:

1. I see lots of updates marked as 'This update is superseded by another update...' What a m I exactly supposed to do? Should I decline the superseded updates and accept the superseding update? Why does WSUS not do this automatically? How do i find the superseding update easily in the huge list?

2. What is the best practice? Do I have to approve updates only when they are detected as needed by computers or should I approve them anyway?

3. I have the default automatic approval rule that approves critical , definition and security updates to all computers. When will it run? It does not seem to be working, how do I verify?
0
Comment
Question by:smtwkla
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 14

Assisted Solution

by:Hedley Phillips
Hedley Phillips earned 250 total points
ID: 22848941
1) As there are so many of them I always just allow them and know that they will be superceded by a later update.

You can use the Server Cleanup Wizard to clean up superceded updates at a later date:
http://technet.microsoft.com/en-us/library/cc708578.aspx

2) I approve updates on a weekly basis to a test group containing our secondary server, a laptop and a desktop. If none of these reports a problem in 7 days I then approve those updates for the entire domain. This is on a rolling basis.

3) I don't use any auto approval. We once had a server down for 3 days because of an update so everything is now controlled by us.


0
 
LVL 1

Author Comment

by:smtwkla
ID: 22853373
Mr.Madcowz, thanks for the info.

"1) As there are so many of them I always just allow them and know that they will be superceded by a later update."

What will happen if I approve a superceeded update AND the superceeding update? Will both get at the client? Is it possible / required for me to detect it and decline the superceeded update?
0
 
LVL 1

Author Comment

by:smtwkla
ID: 22853448
When viewing superceeded updates, WSUS Warns me "This update is superceeded by another update. ...we recommend that you make sure it is no longed required by computers. To do so, approve the superceeding updates first."

What do they mean? When there is a superceeding update, isn't it enough if the superceeding update is approved? Why bother with the superceeded update?

Again, how do I make out which update superceeds which? By the KB Number?
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 14

Expert Comment

by:Hedley Phillips
ID: 22857757
I really don't bother. I just approve them and let WSUS work it out. Seems to go ok.

So if there are 2 updates and another supercedes it I will approve them all and have always assumed that WSUS makes sure that the latest one is the one that gets sent to the clients.

I suppose you could approve just 2 updates (one old, one new) and see which gets sent out to a test dekstop.
0
 
LVL 1

Accepted Solution

by:
smtwkla earned 0 total points
ID: 22859916
To quote from WSUS 3.0 Operations Guide Microsoft Windows Server Update Services 3.0 SP1 Operations Guide (http://go.microsoft.com/fwlink/?LinkId=86697)::

"In an individual update's detail pane, an informational icon and a message at the top indicates that it either supersedes or is superseded by another update. In addition, you can determine which updates supersede or are superseded by the update by looking at the Updates superseding this update and Updates superseded by this update entries in the Additional Details section of the Properties."
 
"WSUS does not automatically decline superseded updates, and it is recommended that you do not assume that superseded updates should be declined in favor of the new, superseding update. Before declining a superseded update, make sure that it is no longer needed by any of your client computers.

The following are examples of scenarios in which you might need to install a superseded update:

"      If a superseding update supports only newer versions of an operating system, and some of your client computers run earlier versions of the operating system.
"      If a superseding update has more restricted applicability than the update it supersedes, which would make it inappropriate for some client computers.
"      If an update no longer supersedes a previously released update because of new changes. It is possible that through changes at each release, an update no longer supersedes an update it previously superseded in an earlier version. In this scenario, you will still see a message about the superseded update, even though the update that supersedes it has been replaced by an update that does not."

The doc also lists microsoft's recommended update procedure.
0
 
LVL 1

Author Comment

by:smtwkla
ID: 22860030
ok
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question